A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random() function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by writing the same random function code in an exploit contract to determine the deadSeat value.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-10-23T21:00:00

Updated: 2024-08-05T11:01:14.649Z

Reserved: 2018-10-03T00:00:00

Link: CVE-2018-17968

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-10-23T21:30:53.737

Modified: 2018-12-08T02:26:05.660

Link: CVE-2018-17968

cve-icon Redhat

No data.