VYPR

All For One

by All For One

CVEs (1)

  • CVE-2018-12056Aug 15, 2018
    risk 0.00cvss epss 0.00

    The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get…