Giters

fravoll / solidity-patterns

A compilation of patterns and best practices for the smart contract programming language Solidity

Home Page:https://fravoll.github.io/solidity-patterns/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Is the sealedSeed in Randomness contract secure?

simontianx opened this issue · comments

commented

Hey, one concern I had about the contract sample in your article is the state variable bytes32 sealedSeed; is stored in the first slot of the contract storage. Isn't this easily accessed by web3.eth.getStorageAt(contractAddr, 0) function? A malicious attacker can read the seed and make a sure bet.