block.timestamp
in Dussehra::killRavana
function allows someone to call the function 2 minutes before October 12th and 1 minute after October 13th.Description: According to the sponsor "killRavana
- Allows users to kill Ravana and Organiser will get half of the total amount collected in the event. this function will only work after 12th October 2024 and before 13th October 2024." The values of block.timestamp
were set up correctly inside the ChoosingRam
contract, but are slightly off in the Dussehra
contract.
Impact: A user can call the killRavana
function ~2 minutes earlier than expected and ~1 minute later than the expected end date.
Recommended mitigation: Adjust block.timestamp
to match the values in the ChoosingRam
contract. 1728691200
for start time and 1728777600
end time.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.