CVE-2018-15552: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" which is private, yet predictable and readable by the eth.getStorageAt function. Therefore, it allow...

PT-2018-11185

Name of the Vulnerable Software and Affected Versions simplelottery smart contract implementation for 1000 Guess affected versions not specified Description The issue concerns the addguess function of the simplelottery smart contract implementation, which is used in the 1000 Guess Ethereum gambli...

CVE-2018-12454: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly readable variables such as the current block information and a private variable which can be read with a getStorageAt call. Therefore, it allows...