Submission Details
Severity:
`ScoreBoard::setPrediction(address,uint256,ScoreBoard.Result)` uses timestamp for comparisons which can be manipulated by attackers.
Summary
Dangerous usage of block.timestamp. block.timestamp can be manipulated by miners.
Vulnerability Details
- block.timestamp <= START_TIME + matchNumber * 68400 - 68400 (src/ScoreBoard.sol#66)
Impact
An attacker can manipulate the contract via block.timestamp.
Tools Used
Slither
Recommendations
Avoid relying on block.timestamp and consider using an oracle for time-sensitive operations.
Updates
Lead Judging Commences
NightHawK 11 months ago
Submission Judgement Published Assigned finding tags:
setPrediction lacks access control
setPrediction has no access control and allows manipulation to Players' predictions.
Rewards breakdown
nSLOC
191This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.