Rock Paper Scissors

First Flight #38
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: medium
Invalid

Using `block.timestamp` for setting deadlines can create vulnerabilities

Description: Miners or validators can manipulate the timestamp (around 15 seconds), allowing them to execute transactions at advantageous times,
potentially leading to unfavorable outcomes for players.
Because the minimum reveal time is set to 5 minutes, miners can manipulate the block timestamp to push it past the deadline, causing the player to fail the reveal.

Impact: This can directly affect the game outcome, if your opponent is a miner, they can manipulate the block timestamp to take advantage.

Recommended Mitigation: Use block.number instead of block.timestamp for setting deadlines.

Updates

Appeal created

m3dython Lead Judge about 2 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Informational

Code suggestions or observations that do not pose a direct security risk.

m3dython Lead Judge about 2 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Informational

Code suggestions or observations that do not pose a direct security risk.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.