The Ethereum Lottery

the_ethereum_lottery

Vendor: Theethereumlottery • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-15552

1Theethereumlottery

1The Ethereum Lottery

Nov 21, 2024

Sep 7, 2018

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet predictable and readable by the eth.getStorageAt function). Therefore, it allows attackers to always win and get rewards.Show less