CVE-2018-12885
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current bl…
Published: 2018-08-07 · CVSS: Unscored
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7