Bitcoin Forum

This thread is a warning to all users of this community!

DO NOT buy/use this script: DiceScript 3.3 - sold here: https://bitcointalk.org/index.php?topic=1044191
It is full of bugs, has multiple security issues and you will lose all the money.

My personal experience about this script :  

I bought this script (https://bitcointalk.org/index.php?topic=1044191) with the intention of using it for a website (http://dice.bitcoinspace.net)
I ended up losing all the BTC due to a bug in the script that allowed a user to to withdraw all the amount of available balance in 2 hours.
I can provide (to those who are interested) evidence about this incident.


PS:  please a moderator to move this in the right category.

This is probably because there was a backdoor in the script. I can help you finding out if there was backdoor in it or not, if there was you have complete right to get your money back and the sales of lisek will end and he will get negative trust. Can you provide me more evidences via PM? I hope I can help you with this.

Edit : How much was the amount stolen?

I see the "attacker" withdrew more than 1btc AFAIK , here is his address where he withdrew the funds to https://blockchain.info/address/192dQK5LhCwhPNi1uEe3qbDg6v77RCPmNZ , as written on the site by OP. BTW maybe move this thread to scam accusation, you can do it yourself, no need for mods.

The script does not have backdoors. You bought by paypal. Do you think I would have risked paypal account? You should consider, that there are people who win. I wrote you that you set a cold wallet. You have not customized to my instructions and you now have sorrow

Your dice script is such a scam. 1 btc for something copied from github and modified a tiny bit, if at all.

Tap on the head !!! Exit outside and jogging !! Show me the github source !!

https://github.com/felinegambler/CryptoDice

This script is quite different, look at files and look them up on my demo site

The cold wallet was set to 1 BTC.
Your script is full of bugs !
How you can say that your script is safe if some users manage to create 3000 accounts in 1 hour ? :)
That user - 192dQK5LhCwhPNi1uEe3qbDg6v77RCPmNZ -  took all my BTC in 2 hours without playing and without making a deposit!
He made withdraws at every 3-4 minutes without playing.

You really wanted to run a serious gambling website with 1 BTC bankroll?
You are funnier than the script itself.

Can you post some proofs publically?


Maybe he didn't want to throw in big amount in bankroll in starting and wanted to just test the site first with small bankroll. :)

You sir are fucking stupid.

I was close to start with 5 BTC, but now I'm glad I did not!  :)

It's not easy to write secure software, it could just be poorly written.
When I wrote my dice script I had it running for a few weeks before an attacker found a way to exploit and empty my wallet.
So I had to figure out what they did to exploit it and then patch it. Then a week later another exploit, so I had to rework the whole thing again. It's been running solid now for about 3 weeks so I think I've patched all the previous security holes. Only time will tell though. It takes a lot of time and effort to write a secure script since there are so many tools attackers can use today against your site. At least when you do it yourself you only have yourself to blame and you don't have to worry about backdoors.
Good luck OP, I hope you figure out what happened and re-coup your losses.

You're right, but you do not sell the script and not pretend that is safe and without bugs.

I get a feeling that this is what happened?
This particular user created 3000 accounts claimed faucet auto, and withdrew the funds?

Don't tell me, you did require players to complete Captcha to claim faucet, right?

No, accounts have been created on another day ...
There is a captcha on faucet.

@lisek229 is the seller !?      ???

still he is selling it  :o

Yes he is the seller.

I dont think that somebody will buy and use this shitty script.

You can get the script free off github, its just the script that everyones trying to sell, it all looks the same

UPDATE:

Because I received many request from users who want to check/verify this script , here is the original archive :  https://mega.nz/#!HlIGkBjC!3cseudFuHwsOLIiHXbOCCI_1sXHD7qPxrZywHBVXCPc (https://mega.nz/#!HlIGkBjC!3cseudFuHwsOLIiHXbOCCI_1sXHD7qPxrZywHBVXCPc)

I hope you guys will be able find the all the bugs ...

Good news : Paypal did nor refund me the payment , so I lose my money and my BTC  :)

The seller posted a new version where he said that all the errors are fixed , but I dont think so

I have gone through the script. I seriously couldn't find a backdoor as such. Maybe it was because of the faucet thing, a guy made a lot of accounts and exploited the faucet. Sounds possible to me.  ::)

Maybe ... because in 2 hours they got all my BTC :)

How much were you offering from the faucet?
And what was min. withdrawal and min. tip?

How many accounts were made in those 2 hours? How much you lost and how much faucet offered? If you can show me some proofs I can help you find the true cause. I am myself a coder and have coded 3 dice sites by now.

So is this script just a modified version of johnnys original horrendous script or is it something else?
I might have to check it out and see what exactly is different about it... Something tells me zilch..

Very interested to see if the script runs and if I can find the hole in the security that got your hot wallet drained..

Will post back here if I figure something out.

Sorry to hear that you have been scammed by him as well apart from bitbox...

has any one tried his latest version 3.4?

There are too many scammers in this bitcoin world ...
Update: today I posted a reply to the seller thread asking a legit question: why I did not get the last version of the script (since the seller offers free updates).
He deleted my post:

https://s4.postimg.org/ikell0mtp/dice.jpg

sorry to hear this..

If you want to play with the script (3.3) version you can download it from here:  https://mega.nz/#!HlIGkBjC!3cseudFuHwsOLIiHXbOCCI_1sXHD7qPxrZywHBVXCPc (https://mega.nz/#!HlIGkBjC!3cseudFuHwsOLIiHXbOCCI_1sXHD7qPxrZywHBVXCPc)
You can check it, maybe fix it and make something good (if can be done).