The block.timestamp is used as a parameter to verify the end of the deadline.
Summary
In the protocol, the goal of the deadline is to establish a period dedicated to collecting funds for the Christmas dinner.
Vulnerability Details
To verify the current status of the deadline, the block.timestamp is used. However, this method is considered a weak source of time in blockchain. It can be manipulated by dishonest validators, and the naturally assumed period of 2 days for the deadline can vary, becoming either shorter or longer, depending on blockchain bandwidth.
Impact
The assumed deadline period can be disrupted, leading to an improper deadline value, which may compromise the protocol.
Tools Used
manual review
Recommendations
Please consider use oracle to set proper time in smart contract.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.