Thanks for the fast replay.

Is the block id not a problem when there are many transitions? So all users in the block will win the same amount.

Unfortunately, this would be the case.

You say, a transaction can be generated unlimited times. Am I right that one would have to manipulate the client for this?

Yes, but when you're running a gambling site that has such an obvious vulnerability, it WILL be exploited.

okay