CVE-2018-17877

A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize function to prevent a malicious contract from being called, but the attacker can bypass it by writing t...

PT-2018-13082

Name of the Vulnerable Software and Affected Versions The Ethereum Lottery affected versions not specified Description The issue concerns the "PayWinner" function of a simplelottery smart contract implementation, which generates a random value. This value is influenced by the maxTickets variable,...