WeakRandomness in `ChoosingRam::selectRamIfNotSelected`
WeakRandomness in ChoosingRam::selectRamIfNotSelected
Description:
The selectRamIfNotSelected function in the ChoosingRam contract uses a weak randomness mechanism that relies on block.timestamp, block.prevrandao, and msg.sender to determine the random outcome. This method of generating randomness is susceptible to manipulation by miners and other participants, compromising the fairness and security of the selection process.
Proof of Concept:
https://prnt.sc/0otWih7Qycgy
Recommended Mitigation:
Use chainlink VRF:https://docs.chain.link/vrf
Lead Judging Commences
Weak randomness in `ChoosingRam::selectRamIfNotSelected`
The organizer is trusted, but the function `ChoosingRam::selectRamIfNotSelected` uses a way to generate a random number that is not completely random.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.