A value that should be secret until execution (a bid, a move, a claim code) is submitted in the clear in a single transaction. Searchers read it in the mempool and front-run, capturing the advantage the secrecy was meant to protect.
// bid(amount) is public in the mempool. // searcher sees it and submits bid(amount+1) with higher gas -> wins.
// commit hash first, reveal later
function commit(bytes32 h) external { commits[msg.sender] = h; }
function reveal(uint256 v, bytes32 salt) external { require(keccak256(abi.encode(v,salt))==commits[msg.sender]); }
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0252 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.