Root + Impact

Description

When a challenger joins the arena, the battle immediately occurs and the winnner is determined randomly using timestamp in seconds.

This is extremely vulnerable to an attack where a malicious challenger could choose to only join an arena when the timestamp is favorable for them. The fact that the time is taken in seconds is even worse than if it was milliseconds, since even an untrained rapper will have a 50 seconds timestamp inside which they can't loose.

Risk

Likelihood:

A challenger has the possibility to join the battle only during a time where they ensure a win.

Impact:

Every defender will loose battles

Recommended Mitigation

Refactor the battle mechanics to use real randomness instead of pseudo-randomness with timestamp.