Eggstravaganza

First Flight #37
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: high
Invalid

Random number generation is unreliable

Summary

If the game is based on random number generation and high stakes, you need to look for a more reliable generation model

Vulnerability Details

In this contract, the player finds eggs based on the results of random number generation, the players' winning percentage and the game owner's income depends on it. In this case, the chosen generation is only suitable for low stakes or for games without NFT, as the variables in the generation will be easily predicted by the miners and easily influenced.

Impact

Manipulation of random numbers as a result of the game owner losing money.

Tools Used

Recommendations

Review the random number generation system. To an oracle-based generation system. Like Chainlink VRF.
This method is well described in the article

https://blog.chain.link/random-number-generation-solidity/

https://docs.chain.link/vrf#overview

Updates

Lead Judging Commences

m3dython Lead Judge 2 months ago
Submission Judgement Published
Invalidated
Reason: Too generic

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.