Submission Details
Severity:
The function `Dussehra:killRavana` does not use one of the correct Epoch Unix Timestamp.
Summary
The function Dussehra:killRavana does not use one of the correct Epoch Unix Timestamp.
Vulnerability Details
Dussehra:killRavana function allows RAM to kill Ravana before the official start of the event and a little after the official end of the event
Impact
Unfair advantage by exploiting this information allowing the front-runner to profit of this flaw.
Tools Used
Manual review
Recommendations
Replace the timestamp by the correct Epoch Unix Timestamp
function killRavana() public RamIsSelected {
- if (block.timestamp < 1728691069) {
+ if (block.timestamp < 1728691200) {
revert Dussehra__MahuratIsNotStart();
}
- if (block.timestamp > 1728777669) {
+ if (block.timestamp > 1728777600) {
revert Dussehra__MahuratIsFinished();
}
IsRavanKilled = true;
uint256 totalAmountByThePeople = WantToBeLikeRam.length * entranceFee;
totalAmountGivenToRam = (totalAmountByThePeople * 50) / 100;
(bool success, ) = organiser.call{value: totalAmountGivenToRam}("");
require(success, "Failed to send money to organiser");
}
Rewards breakdown
nSLOC
218This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.