Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: low
Invalid

`ChoosingRam::increaseValuesOfParticipants(uint256,uint256)`, `ChoosingRam::selectRamIfNotSelected()`, and `Dussehra::killRavana()` use dangerous timestamp for comparisons

Summary

Dangerous usage of block.timestamp can be manipulated by attackers.

Vulnerability Details

Dangerous comparisons:
- block.timestamp > 1728691200 (src/ChoosingRam.sol#47)
- random == 0 (src/ChoosingRam.sol#54)
Dangerous comparisons:
- block.timestamp < 1728691200 (src/ChoosingRam.sol#84)
- block.timestamp > 1728777600 (src/ChoosingRam.sol#87)
Dangerous comparisons:
- block.timestamp < 1728691069 (src/Dussehra.sol#68)
- block.timestamp > 1728777669 (src/Dussehra.sol#71)

Impact

Usage of block.timestamp allows the protocol to be manipulated by attackers.

Tools Used

Slither

Recommendations

Avoid relying on block.timestamp.

Updates

Lead Judging Commences

bube Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Info/Gas/Invalid according to docs

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.