CVE-2018-12056

The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables…

published August 15, 2018

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01675 · 76.7th percentile
Published
2018-08-15T17:00Z
EPSS history
Timeline
  • 15 AUG 17:00Z
    The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables…
    cvelistv5