关键信息 CVE ID: CVE-2018-17968 Vendor: RuletkaIo Vulnerability Type: Bad Randomness Abstract: A gambling smart contract for RuletkaIo, an Ethereum game, uses a random function based on block timestamp and block hash, making it predictable. This allows attackers to determine the "deadSeat" value and win. Details: The contract uses a "random()" function with block timestamp and block hash, which is exploitable by predicting the "deadSeat". Exploit Code: Conclusion: Secure random number generation in Solidity is challenging. Reference: - Official Website: RuletkaIo - DappRadar: RuletkaIo - Explorer: Etherscan - Code: Etherscan Discoverer: Team Code4Block