Submission Details
Severity:
Hash Collision in Move Commitments
Summary: Move commitment hash can be broken due to small input space.
Details: The move commitments use keccak256(move, salt) where move is only 1-3. An attacker could pre-compute all possible hashes for each move value and break opponent's commitment.
Impact: Could determine opponent's move before reveal phase, completely breaking game fairness.
Recommendation: Use a more robust commitment scheme:
Updates
Appeal created
m3dython 7 months ago
Submission Judgement Published Assigned finding tags:
Lack of Salt Uniqueness Enforcement
The contract does not enforce salt uniqueness
Rewards breakdown
nSLOC
349This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.