Skip to content
OpenAdvisories
Unscored CVE-2018-17968 EUVD-2018-9708GHSA-86g8-6g97-8fhv

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an exter…

Published Oct 23, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random() function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by writing the same random function code in an exploit contract to determine the deadSeat value.

References