Submission Details
Impact:
Likelihood:
[L-03] Use of block.timestamp for Time Comparisons
Description
-
The contract uses block.timestamp for 24-hour day calculations and cooldown periods, which can be slightly manipulated by miners.
// Root cause in the codebase with @> marks to highlight the relevant section
Risk
Low Likelihood:
Not economically viable to manipulate for these timeframes
Low Impact:
-
Minor time manipulation doesn't significantly affect 24-hour periods or 3-day cooldowns
Recommended Mitigation
Recommended Mitigation:
For higher precision, consider using block numbers:
+uint256 public constant BLOCKS_PER_DAY = 7200; // ~24 hours at 12s/block
+function getCurrentDay() public view returns (uint256) {
+ return block.number / BLOCKS_PER_DAY;
+}
Rewards breakdown
nSLOC
157This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.