The createGameWithEth
function uses block.timestamp
to set creationTime and joinDeadline. While this is standard practice, miners can manipulate timestamps within a small range, potentially affecting game timing.
A miner-controlled player (Player A) can slightly manipulate block.timestamp (within ~15 seconds) to extend or reduce the join deadline window.
Minor timing inconsistency. Not exploitable for major economic gain, but may affect fairness in edge cases.
Manual review.
Use block.timestamp with caution. For time-sensitive logic:
Document potential for slight manipulation.
Consider block.number for more consistency (less precise, but more stable over time).
Code suggestions or observations that do not pose a direct security risk.
Code suggestions or observations that do not pose a direct security risk.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.