Lucene search
+L

CVE-2018-12454

🗓️ 17 Jun 2018 12:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 86 Views🌐 WEB

The _addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, allows attackers to always win and get rewards

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cnvd
CNVD
1000 Guess has an unspecified vulnerability
3 Jul 201800:00
cnvd
cvelist
Cvelist
CVE-2018-12454
17 Jun 201812:00
cvelist
euvd
EUVD
EUVD-2018-4425
7 Oct 202500:30
euvd
nvd
NVD
CVE-2018-12454
17 Jun 201812:29
nvd
prion
Prion
Information disclosure
17 Jun 201812:29
prion
seebug
seebug.org
Attack on Pseudo-random number generator (PRNG) used in 1000 Guess, an Ethereum lottery game. (CVE-2018–12454)
9 Jul 201800:00
seebug
NVD
ParameterPositionPathDescriptionCWE
addresspathetherscan.io/address/0x386771ba5705da638d889381471ec1025a824f53Target 1000 Guess contract exploited to win via stored private variable read and block vars manipulation.CWE-338
typepathetherscan.io/address/0x386771ba5705da638d889381471ec1025a824f53Target 1000 Guess contract exploited to win via stored private variable read and block vars manipulation.CWE-338
addresspathetherscan.io/address/0x48e9c58bb66dd0b0f218cf0448a797096d585179Attacker's contract used to trigger internal transactions to relay curhash and claim reward.CWE-338
typepathetherscan.io/address/0x48e9c58bb66dd0b0f218cf0448a797096d585179Attacker's contract used to trigger internal transactions to relay curhash and claim reward.CWE-338
addresspathetherscan.io/address/0x9dbea040fde74f9014c873401675ccd298d302baVictim account used in attack to repeatedly place bets and approach finish condition.CWE-338
typepathetherscan.io/address/0x9dbea040fde74f9014c873401675ccd298d302baVictim account used in attack to repeatedly place bets and approach finish condition.CWE-338
addresspathetherscan.io/address/0x28fb13eb570c23bf65f606431a6cc3ff34f41af0Attacker account involved in the exploitation flow.CWE-338
typepathetherscan.io/address/0x28fb13eb570c23bf65f606431a6cc3ff34f41af0Attacker account involved in the exploitation flow.CWE-338

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 01:37Current
7.3High risk
Vulners AI Score7.3
CVSS 25
CVSS 37.5
EPSS0.01253
86