Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p9f6-cwf6-ccqv

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game.

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game.

EPSS

Процентиль: 60%
0.00391
Низкий

7.5 High

CVSS3

Дефекты

CWE-338

Связанные уязвимости

CVSS3: 7.5
nvd
больше 7 лет назад

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game.

EPSS

Процентиль: 60%
0.00391
Низкий

7.5 High

CVSS3

Дефекты

CWE-338