Submission Details
Severity:
Implementation flaw in `ChoosingRam:increaseValuesOfParticipants` it is possible to bypass the randomness of the function
Summary
Implementation flaw in ChoosingRam:increaseValuesOfParticipants it is possible to bypass the randomness of the function
Vulnerability Details
It's possible to bypass the randomness of the function by calling the function ChoosingRam:increaseValuesOfParticipants if we pass the same tokenID in both tokenIdOfChallenger and tokenIdOfAnyPerticipent
Impact
the randomness of this event is completely altered and leads to the deterministic selection of a RAM.
Tools Used
Manual review
Recommendations
add revert condition tokenIdOfChallenger must be different of tokenIdOfAnyPerticipent
if (tokenIdOfChallenger == tokenIdOfAnyPerticipent) {
revert ChoosingRam__sameTokenId();
}
Rewards breakdown
nSLOC
218This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.