Submission Details
Severity:
Predictable Random Generation
Summary : In the openBox function, the contract uses block.timestamp and msg.sender to generate a random number.
Vulnerability Details : This method is predictable and can be exploited.
Impact
Tools Used
Recommendations :
Use a more secure source of randomness, such as a randomness oracle like Chainlink VRF, or accept that the randomness generation is manipulable if secure randomness is not essential to the application.
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.