Submission Details
Severity:
Miner-Controllable Deadlines
Miner-Controllable Deadlines
Summary
Game deadlines rely on block.timestamp, which miners can manipulate within ~30 seconds.
Vulnerability Details
Location: revealDeadline and joinDeadline checks
Issue:
Miners can slightly alter timestamps for advantage
Particularly impactful for high-value games
Impact
Minor fairness compromise in time-sensitive actions
Tools Used
Manual Review
Recommendations
-
Use block.number for critical deadlines
-
Add buffer times to mitigate miner influence
Updates
Appeal created
m3dython 2 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational
Code suggestions or observations that do not pose a direct security risk.
m3dython 2 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational
Code suggestions or observations that do not pose a direct security risk.
Rewards breakdown
nSLOC
349This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.