EOS.WIN gambling DApp was exploited on November 12, 2018 via a randomness prediction attack. An attacker conducted 165 test transactions the day prior, then executed 10 successful attacks in one minute gaining 9,180 EOS. The attacker predicted the random number by controlling the ref block num parameter.

The game contract was attacked by the attacker lockonthecha.