4 matches found
Design/Logic Flaw
The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...
CVE-2018-12975
The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...
CVE-2018-12975
CVE-2018-12975 concerns CryptoSaga’s smart contract random() function. The vulnerability stems from using publicly readable variables—timestamp, current blockhash—and a private variable readable via getStorageAt—as inputs to random value creation. This allows an attacker to precompute the random ...
CVE-2018-12975
The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...