[L-2] No max `_timeoutInterval` on game creation
Description: The _timeoutInterval parameter in createGameWithEth and createGameWithToken controls how long each reveal phase lasts. While a minimum of 5 minutes is enforced, there is no maximum cap, allowing users to create games with unreasonably large timeout intervals.
Impact: Allows users to lock game state for extended periods (e.g., days, weeks, or even years).
Recommended Mitigation: Consider enforcing a reasonable upper bound for _timeoutInterval.
Appeal created
Informational
Code suggestions or observations that do not pose a direct security risk.
Informational
Code suggestions or observations that do not pose a direct security risk.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.