[L-1] Game can be ended prematurely by owner before time is up
Root Cause: Missing Time Check
Impact: Game Disruption
Description
The EggHuntGame::endGame() function in EggHuntGame allows the owner to end the game at any time without checking if the game duration has elapsed. This means the owner can arbitrarily end the game early, even if the intended game period is not over.
Impact
Game can be ended prematurely before players have had their full opportunity to participate
Players who planned their participation around the advertised game duration may be unfairly cut off
Reduces trust in the game mechanics and fairness
Could be used maliciously by owner to end game early if certain players are winning
Disrupts the intended gameplay experience and expectations
Lead Judging Commences
Trusted Owner
Owner is trusted and is not expected to interact in ways that would compromise security
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.