Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet predictable and readable by the eth.getStorageAt function). Therefore, it allows attackers to always win and get rewards.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ethereum Lottery 安全漏洞
Vulnerability Description
Ethereum Lottery是一款基于以太坊的博彩类游戏。 Ethereum Lottery的simplelottery智能合约实现中的‘PayWinner’函数存在安全漏洞，该漏洞源于‘PayWinner’函数采用公共可读的变量maxTickets生成随机值。攻击者可利用该漏洞赢得游戏并获取奖励。
CVSS Information
N/A
Vulnerability Type
N/A