A BlindBox gambling contract (
0x1F8336aEF584795E282FECe8DE356BaBD7734c59) was exploited due to weak randomness using blockhash, allowing an attacker to selectively settle only winning bets.By batching thousands of bets in the same block and checking outcomes off-chain, the attacker achieved a near 100% win rate, draining ~13M ATM tokens and later dumping them on PancakeSwap.
🔔 @observer • 💬 Join community