search

sherlock-audit / 2023-10-real-wagmi-judging

16 stars 14 forks source link

phenom - Timestamp may be manipulation #165

Closed sherlock-admin closed 1 year ago

sherlock-admin commented 1 year ago

phenom

medium

Timestamp may be manipulation

[L-4] Timestamp may be manipulation

Impact:

The block.timestamp can be manipulated by miners to perform MEV profiting or other time-based attacks.

Instances (8):

File: LiqBorrowingMan/LiquidityBorrowingManager.sol

142:         return block.timestamp;

File: LiqBorrowingMan/abstract/DailyRateAndCollateral.sol

47:             uint256 timeWeightedRate = (uint32(block.timestamp) -

54:         holdTokenRateInfo.latestUpTimestamp = uint32(block.timestamp);

79:             uint256 timeWeightedRate = (uint32(block.timestamp) -

86:         holdTokenRateInfo.latestUpTimestamp = uint32(block.timestamp);

File: LiqBorrowingMan/abstract/LiquidityManager.sol

89:         bytes32 salt = keccak256(abi.encode(block.timestamp, address(this)));

358:                 deadline: block.timestamp

405:                 deadline: block.timestamp