VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026

CVE-2018-13877

CVE-2018-13877

Description

The doPayouts() function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchase attempts will not be completed unless the doPayouts() function successfully sends Ether to certain neighbors.

Affected products

2
  • MegaCryptoPolis/MegaCryptoPolis2 versions
    cpe:2.3:a:megacryptopolis:megacryptopolis:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:megacryptopolis:megacryptopolis:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.