Mystery Box

Summary

Randomness generation mechanism is wrong

Vulnerability Details

never use block.number , block.timestamp for generating the random number becuase it can be easily exploited by attacker

Impact

any user can generate random number on its own and can get type of coin what user wants

Tools Used

Manual

Recommendations

not use block.timestamp , block,number for random value generation