Design/Logic Flaw

The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...

CVE-2018-12885

The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...

CVE-2018-12885

The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...

CVE-2018-12885

No technical details about CVE-2018-12885 are present in the provided connected documents. Technical specifics, affected products, or remediation are not publicly available here; monitor for updates.

PT-2018-11451

Name of the Vulnerable Software and Affected Versions MyCryptoChamp affected versions not specified Description The issue concerns the randMod function in the smart contract implementation of MyCryptoChamp, an Ethereum game. This function generates a random value using publicly readable variables...

CVE-2018-12885: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...