CVE-2018-12885

The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards.

The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards.

La función randMod() de una implementación de contrato inteligente de MyCryptoChamp, un juego de Ethereum, genera un valor aleatorio con variables legibles globalmente como la información de bloque actual y una variable privada (que se puede leer con una llamada getStorageAt). Por lo tanto, los atacantes pueden obtener champs/objetos poderosos y obtener recompensas.