Frontier Era

A call forwarder from the Ethereum Alarm Clock: it relays a call to any address, and only the scheduler that created it may ask.

The scheduler of the Ethereum Alarm Clock: it holds deposits, records calls against a future block, and pays whoever executes them.

The SimpleStorage example that opens the Solidity documentation, retyped with its two functions in the other order.

An ownership holder with no access control: it stores one address and any account at all can overwrite it.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

Vitalik Buterin Serpent oracle fetcher (Oct 12, 2015). get(string) requires >=0.007 ETH, derives a request id from sha3+block.prevhash, emits GetRequest, returns the id, and sends the balance to Vitalik's 0xde0b2956 address. Byte-for-byte cracked (Serpent @ f0b4128).

Vitalik Buterin Serpent oracle fetcher (Oct 12, 2015). Same get(string) request contract as 0x7e7f6373; sweeps balance to 0xb3cd4c25. Byte-for-byte cracked (Serpent @ f0b4128).

A 108 byte ownership holder whose setter checks nothing, so any address can name itself owner.

Delegated voting with a proposal count fixed at deployment

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

Vitalik Buterin Serpent oracle caller (Oct 12, 2015). Two functions: call() invokes an external fetcher's get(string) and stores a callback id; callback() re-emits the response as LogResponse. NOT a lottery. Byte-for-byte cracked (Serpent @ f0b4128).

Vitalik Buterin Serpent oracle caller (Oct 12, 2015). callback + call; call() forwards value to an external fetcher's get(string) and stores a callback id. Sibling of 0xc861fc8d. Byte-for-byte cracked (Serpent @ f0b4128).

Vitalik Buterin Serpent oracle caller (Oct 12, 2015). Two functions: call() emits a placeholder "cow" log, calls an external fetcher's get(string) forwarding value, and stores a callback id; callback() re-emits the response. NOT a lottery. Byte-for-byte cracked (Serpent @ f0b4128).

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

Requests off-chain data from a URL through an external fetcher contract and records the returned result on-chain by emitting an event.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.

A two function ownership holder from October 2015 whose setter has no access control, so any address can take it over.