你能在 Move 中的非条目公共函数中使用随机性吗？

Question

我是在 Move 编程中使用随机性的新手. 该文档建议仅在输入函数中使用随机数. 但是，我正在考虑使用随机性来设置值，而不是用于分支代码. 以这种方式在公共函数中使用随机性可以吗？

Ramirez · Accepted Answer

Not necessarily. If you define a public function, like foo(Random, SharedObj, ...), an attacker can exploit this by creating a function, say attack(Random, SharedObj, ...), which calls your function. The attacker can then inspect modifications to the shared object, deciding whether to abort the transaction based on its new state. This is similar to an attack described in the Sui documentation on randomness, but involves a shared state. Even if sensitive fields arent exposed, an attacker could serialize and parse the objects state. Therefore, they could always win or abort but never lose. If this is acceptable for your use case, you could proceed with using a public function and suppress the warning.

帖子

分享您的知识。

你能在 Move 中的非条目公共函数中使用随机性吗？

答案

你知道答案吗？