First Flight #20: The Predicter

Relevant GitHub Links

https://github.com/Cyfrin/2024-07-the-predicter/blob/839bfa56fe0066e7f5610197a6b670c26a4c0879/src/ThePredicter.sol#L93

Summary

Dangerous usage of block.timestamp. block.timestamp can be manipulated by miners.

Vulnerability Details

A malicious miner can manipulate the block timestamp to make predictions after the match has finished.

Recommendations

Avoid relying on block.timestamp.

Impact

Despite the high potential impact, the likelihood of this scenario occurring is low. It depends on the incentives involved and, considering the number of players and the value of the entrance fee, the likelihood remains very low.

Tools Used

Manual review