CVE-2018-17071: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entrynumber. This variable is private, yet it is readable by eth.getStorageAt function. Also, attackers can purchase a tick...