Description

Inside Track / Entropy Derby is a research-grade horse-racing betting engine. Prior to commit 2d38d2f, the VDF-based timelock encryption system fails to enforce sequential delay against the betting operator. Bettors pre-compute the entire Wesolowski VDF and include vdfOutputHex in their encrypted bet ticket, allowing the house to decrypt immediately using fast proof verification instead of expensive VDF evaluation. This issue has been patched via commit 2d38d2f.

INFO

Published Date :

2025-11-25T00:30:14.735Z

Last Modified :

2025-11-25T14:34:57.964Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-65951 vulnerability.

Vendors Products
Mescuwa
  • Entropy-derby
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-65951.

URL Resource
https://github.com/mescuwa/entropy-derby/commit/2d38d2f16bbb3b4240698148f80d8c5202725c77 cve-icon cve-icon
https://github.com/mescuwa/entropy-derby/security/advisories/GHSA-pm54-f847-w4mh cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact