Submission Details
Severity:
Predictable randomness
Author Revealed upon completion
Predictable randomness
Description
An attacker can use an address and a miner can influence timestamp to control demand size.
Risk
Likelihood: High
Impact: High
Mitigation
Use secure source of randonmness
Updates
Lead Judging Commences
0xshaedyw about 17 hours ago
Submission Judgement Published Assigned finding tags:
Medium – Predictable Seed
Demand randomness is grindable via timestamp and sender, enabling biased outcomes and reputation manipulation.
Rewards breakdown
nSLOC
265This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
View preliminary resultsAppeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.