First Flight #20: The Predicter

Summary

Owner(Ivan) can set Result on her interests in any time, Maybe owner can set the false result or change the setted result if there are huge profits.

Vulnerability Details

If all user select the mathch is win, and the resutls are all win. but as Ivan have the right set the false result, then he can get max profit.

Impact

Users doubt whether or not owner will set the true result or change the setted results.

Tools Used

Manual

Recommendations

1. Apply the third party trusted info, such as chainlink. to get the match result then call the setResult.

2. Only all people agreed, can set the Result. such as each user supply their singaure with the result, check the result, if passed, can set result.