Security Advisory

CVE-2018-13877

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-08-06 20:00:00
Last updated 2024-08-05 09:14:47
Assigner mitre
State PUBLISHED

Description

The doPayouts() function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contracts land, because those purchase attempts will not be completed unless the doPayouts() function successfully sends Ether to certain neighbors.