High severity7.5NVD Advisory· Published Sep 7, 2018· Updated Jun 17, 2026

CVE-2018-15552

Description

The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet predictable and readable by the eth.getStorageAt function). Therefore, it allows attackers to always win and get rewards.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Team C4b/CVE Listreferences

Patches

Vulnerability mechanics

References

github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-15552nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000