Summary

Anyone can become ram

Vulnerability Details

One can be called ram when they fulfill isJitaKrodhah, isDhyutimaan, isVidvaan, isAatmavan, isSatyavaakyah. We can now see the snippet below

The code checks each of the attributes in Challenger characteristics, let's say the challenger has all the attributes false at the beginning and successfully calls this function 5 times without getting to update Other people attributes (tokenIdOfAnyPerticipent, random == 1). Calling it the first time with all attributes false, will update the attribute of isJitaKrodhah to true, the second call would update the isDhyutimaan resulting in 2 trues and 3 falses, until the last 5th call it will finally update the isSatyavaakyah to true and finally all 5 of them became true, making the address eligible of becoming ram

Impact

anyone who successfully calls increaseValuesOfParticipants and updates their status 5 times (assuming they all have 5 false at the beginning) will be qualified to become ram.

Tools Used

Manual Analsysis

Recommendations

It is better to add some criteria to be able to update their status even if it's random. The random variable actually is nice but it will lead to unauthorized attribute update if it ends up resulting in 1, maybe add another if(random == X) { then update challenger attributes}, with X not equals to 0 or 1.