← Back

Theethereumlottery

theethereumlottery

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
The Ethereum Lottery
the_ethereum_lottery
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-15552
1Theethereumlottery
1The Ethereum Lottery
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet...Show more
The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet predictable and readable by the eth.getStorageAt function). Therefore, it allows attackers to always win and get rewards.Show less