Randomness Security
Summary
The random number generation uses block properties (like block.timestamp and block.prevrandao), which can be manipulated by miners
Vulnerability Details
The random number generation uses block properties (like block.timestamp and block.prevrandao), which can be manipulated by miners.
Impact
This could allow someone to predict or influence the outcome of the trickOrTreat function. Consider using a secure source of randomness, like Chainlink VRF, for critical randomness.
Tools Used
Remix.ide
Recommendations
Consider using a secure source of randomness, like Chainlink VRF, for critical randomness.
Appeal created
[invalid] Weak randomness
It's written in the README: "We're aware of the pseudorandom nature of the current implementation. This will be replaced with Chainlink VRF in later builds." This is a known issue.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.