Описание
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards.
Ссылки
- Third Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:mycryptochamp:mycryptochamp:-:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.0045
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-338
Связанные уязвимости
CVSS3: 5.9
github
больше 3 лет назад
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards.
EPSS
Процентиль: 63%
0.0045
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-338