Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variable is private, yet it is readable by eth.getStorageAt function. Also, attackers can purchase a ticket at a low price by directly calling the fallback function with small msg.value, because the developer set the currency unit incorrectly. Therefore, it allows attackers to always win and get rewards.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lucky9io 安全漏洞
Vulnerability Description
Lucky9io是一款基于以太坊的虚拟赌博游戏。 Lucky9io的简单乐透智能合约实现中存在安全漏洞，该漏洞源于回退函数使用公共可读的变量entry_number生成随机值。攻击者可利用该漏洞赢得游戏并获得奖金。
CVSS Information
N/A
Vulnerability Type
N/A