Submission Details
Severity:
Weak random number generator
Summary
The use of block.timestamp to generate a random number makes the process easy to manipulate by miners
Vulnerability Details
(src/MysteryBox.sol#47)
uint256 randomValue = uint256(keccak256(abi.encodePacked(block.timestamp, msg.sender))) % 100;
Impact
High
Tools Used
slither
Recommendations
use chainlink Vrf instead to generate radom numbers
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.