block.timestamp
for comparisons could be manipulated by minersblock.timestamp can be manipulated by miners for their own benefit to increase or decrease the deadline period or overall manipulating the deadline of token expiry. This could cause the entire protocol to fail because the token expiry deadline will be changed and users will be buy the tokens even if the required deadline is gone. The block.timestamp
is used in several places in this contract so it could cause miners to manipulate many things in the contract.
Likelihood:
This will occur when miners will try to manipulate the deadline of the tokens by manipulating the block.timestamp
Impact:
This could cause the comparison to fail and ultimately increase or decrease the deadline of token expiry, and this will cause the entire protocol to fail because then users will be able to buy tokens even if the required deadline is gone.The block.timestamp
is used in several places in this contract so it is vulnerable to as miners could manipulate many things in the contract.
https://github.com/crytic/slither/wiki/Detector-Documentation#block-timestamp
Avoid using block.timestamp
, use block.number
instead. Since block.number
is part of the blockchain's core structure
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.