CVE-2018-17968

7.5 highEPSS 1.2%

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random() function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by writing the same random function code in an exploit contract to determine the deadSeat value.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-338
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ruletkaio:ruletkaio

References

https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17968
https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17968

Check your stack JSON