Skip to content

Block Timestamp Manipulation Dependence

SAFE-0065 Time Dependence Checked automatically by the scanner
1

What goes wrong

Logic uses block.timestamp for fine-grained decisions (randomness, narrow deadlines, exact pricing). Validators can nudge timestamps by a few seconds, biasing outcomes.

2

How to fix it

the pattern that is safe
require(block.timestamp >= startTime + DELAY, "too early"); // tolerant ranges
SWC-116. Use timestamps only with tolerance.
Check your own contract for this

The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0065 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.

Run the scanner See how it is attacked Read the docs