Eggstravaganza

Vulnerability Details

The vulnerability is on EggHuntGame.sol The game's start and end times rely directly on block.timestamp. Miners/validators have some leeway (a few seconds) in setting block timestamps.

A miner/validator could slightly manipulate timestamps when including transactions near the game's start or end times. This could potentially allow them (or others whose transactions they include) to search for eggs slightly before the official start or after the official end, gaining a small, unfair advantage.

Impact

Minor unfairness in edge cases around game start/end times.

Recommendations

Use block numbers instead of timestamps. Block numbers are harder to manipulate and provide a consistent time progression