Bitcoin Forum

The session lasted 9 hours and consisted of a roulette strategy that immediately began raking huge profits without any consistent losses piling up one after another.   On auto bet this strategy would not lose more that 3 times in a row.  It went on like this for 9 hours.   3 hours in when I was up around 8 or 9 BTC I contacted the live chat and told them I may have found a bug because I’m winning way too much.   Yes I actually did this.    I continued winning and once I reached 15BTC I started withdrawing.    After 5BTC of withdrawals the froze my account.    I could still play but I couldn’t move any more out of my wallett.   The admin messaged me after I was up 38BTC and said that I talked him into it and that yes There was a bug.  In the end he left me with 6.5BTC and I kept the XP points.   The bug bounty as it was called.    I still can’t breath when I think about it.    Thoughts?


Thanks for all the thoughts everybody.  It never crossed my mind to try and keep the bug a secret because I didn't want to do the casino wrong since it is such a generous casino in the first place.  The bonuses and daily give aways are second to none and I had been gambling there for a couple years.  Truth be told Im in the US and they dont even allow US players.  I could have been told to kick rocks with nothing.  I started the run with 1.5ETH and walked away with around 6BTC.. not a bad session.  You are all very familiar with the establishment I'm sure.  A fair and stand up spot none other than the great Bitsler.  Baryom is who I dealt with.  The one thing that leaves a bad taste in my mouth is all the rains I gave away.  I rained  atleast 0.5BTC over the 5 to 6 hour session.  But hell it sure made me feel like a rockstar.  Atleast for a short while.
thanks everybody, theraker

Depends on the site and if 6.5 btc is a lot of money to you, especially if you didn't deposit much...

It was probably a wise idea to report the bug, if you really want to you could try asking them for the extra as a form of bouty for finding the bug but since legally you can normally only claim a finders fee of 10% on lost funds then the 6.5 is probably pretty reasonable.

I think that it was pretty much reasonable. Abusing bugs is usually not allowed. It's common sense.
I don't know though if it's covered by ToS and how is it covered by law.

I agree, you're lucky that they gave you a hefty reward for exploring their system.

However, since you didn't name the website, we can't really say if you have the legality to go after them and chase the rest of your winnings, but I would say that it is very reasonable on their part.

It's a quite large bounty you've received for a bug that you've found. It's a double-edged sword though. When Amazon had a bug selling $10k items for under $100 (https://eu.usatoday.com/story/tech/2019/07/19/amazon-prime-day-error-sold-13-000-camera-equipment-94-report/1775314001/), Amazon did not cancel their orders and accepted that the fault was on their side so it would make no sense to cancel them.

When I go to a physical exchange and do not count the money in front of the worker after I receive it, I cannot say "hey, you didn't give me the correct amount!" because it was my own fault for not counting it, right?

Therefore, I wonder what would've happened if OP never knew it was a bug and thought it was just their extremely lucky day for gambling. If OP never told them about the bug, they would've probably let him withdraw the entire amount.

And it could have been accused of stealing, since exploiting bugs to get money is some sort of stealing, after all.
Also the probability to withdraw all is not that big unless OP caught all the onwer(s)/admin(s) away for all that time. And big amount withdrawals are usually verified by a human.

^ Definitely right, but that was a great action when OP reported a possible bug in the system though I am positive that somehow you feel disappointed back then for you lose more than 30 bitcoins because of a bug. Try considering it that you did it in good faith and no one will experience the same as you do besides 6.5 of bitcoins is not bad at all. And the only thing I want to suggest is since you reported a bug you should have asked at least a compensation for doing it may be a few bitcoins but not the whole 38 bitcoins anymore.

If he didn't kyc or anything though then they could've done nothing to get their funds back, the 6.55 is still a nice amount if most of it was a profit on top and of he had kycd or used his own ip then they'd be able to track op down so he could've faced more problems by not declaring it (legal fees on top for example).

Abusing bugs is not sort of stealing its stealing outright and most gambling websites will have it in their terms of service that abusing bugs will result in money not being paid out and anyone caught may have their accounts banned.

OP does this gambling website still exist? They should have given you some compensation at least but I am guessing that the website was amateurish and did not have any bug bounties and they probably did not have it in their terms of service which then brings up the question whether it would be legal. I have read numerous gambling sites and they all have this get out of jail free card but if you report the bug they usually give some compensation.

Certainly he must be lucky for finding a bug and got 6.5 BTC more. Right?  so all in all he got 11.5 BTC?   Must be a big loss from the casino if he had withdraw the 38 BTC. I wonder which casino is this.


The casino would probably investigate the account first and see how it got that much BTC still after his first 5BTC withdrawal.

If you won all those bitcoins just because of the bug then actually it is not yours, but if they have no such rules in their terms of service then you can take legal action and also you can ask other veterans member of bitcointalk if they have support staff in bitcointalk.

It looks like a noble way, but i am not yet clear with the site in which you played and if someone from the site acknowledge that it was indeed a bug and you made the right decision, it would be great to hear. With they way to said, it is not clear whether you exploited anything to win those, it looks like you used some kind of bot and you kept on winning huge number.

@Hopefully you will not start a thread selling your magic bot in the future  :P :D.

Move this thread to gambling discussion.

It sounds like the gambling site was a amateurish setup and I doubt their identities or company would be easily tracked down and proving there was no terms of service stating whether or not it was stated would be difficult with the site no longer existing. This would probably be a difficult court case to win and might end up with costing the OP money.

If they let the OP to withdraw that 6.5BTC then they probably a legit site, just maybe a new one even with old sites we can we get this kind of bugs.

What's that casino? 6.5 BTC for a bounty is already sounded good for you although, you feel bad that you have to return the rest which is a higher amount but that's fine because it's not an actual win for you.
However, you just did the right thing.

Stop being greedy 6.5 BTC  it's enough for you and  maybe it's your luck for this year its good for the bug report but being paid for that depend on the project strategy

Hadn't heard of that story before. But amazon can afford to make that mistake.
Dont know if this particular casino can.
Did OP ever mention which online casino this was?
I know of some casino operators saying they are breaking even and not making much profit at all.
But I like to think of this as just a myth. ;)

I do still appreciate on how honest you are and its pretty rare for someone to tell on what they have discovered because most of the time they will surely abuse it and gradually make some withdrawals to avoid KYC or being detected by the system.

They are quite generous on giving out 6.5 btc as some bounty reward on said bug.Just be grateful that you have received something unexpectedly rather than have nothing at all.
$60k is not something that most people can have.

Just like whats said above, im bit curious on which casino youve been talking on?

Not an expert but I think the letter of the law might side either way, depending on the judgment. But the spirit of the law, which usually prevails, will take into account that you played on suspecting there was a bug, so had you not informed, would likely have ruled against you.

You probably made one of the best possible decisions, and got the best possible outcome. The better decision would probably have been to inform the casino before any withdrawals and negotiate. Fair game you won a bug bounty out of it.

@jackg: I didn't know there was a legal specification for this 10%, where did you find it?

Say the name of casino. We need to know our "heroes". Many fraudful casinos like to block users at the time of withdrawing a large amount of money from the casino. Nothing new

It depends mostly on how much you invested to begin with. If you invested 1 or 2 BTC I'd call it a win. If you deposited more then It'd be a bit of a gray area, because you did find this via a bug, while you made the site better, their ToS must have some sort of appendix for this specific case scenario and you're probably not entitled to much more than what you originally invested.

I'd say you got off just fine, so cheers for that.

I don't remember what crypto gambling site it was (maybe it was Fortunejack) where the player also won several BTC from a bug as well a him playing in the US which is also not allowed, the wrong move he did is he  asked a proxy from another country to deposit his winnings in the gambling site which made a whole lot of mess with his scam accusation. But at the end when all things cleared out they let the player receive all the winnings even if it was from a bug and even if he was playing in the United States, overall I think your case is still acceptable. You aren't allowed to even play in their casino in the first place and they have the right to hold and freeze your account for the violations you have committed, you can't really ask for more at the end.

When you do violate something into their rules or Tos then it would automatically mean that you wont really be recieving anything.Good thing that owners or some admins are considerate on such situation and since you able to find out some bugs then its just ethical for them to made such step on rewarding the said player whom able to found up a bug even he violate some rules, he still eligible to receive up some rewards.If they dont then that will somehow show negativity into their part.In op's case, he's quite lucky on receiving that something big even though he dont able to withdraw the entire
38btc and i do appreciate his honesty.

The title is so click-bait and misleading. You were fairly treated, and given a generous winning amount as well. Responsibly you reported the bug and hence you were awarded more and you withdrew. You weren't forced to pay back your winnings but rather only the winnings due to bug were removed as you confess. It's a fair move!

Why should you give it back to them, maybe they shouldn't run casinos and other sites with full of bugs. Its their fault so enjoy their losses ^^

Nothing beats out on being a honest person and people do have different ways on dealing up with things. Most people might be greedy but there are some
which are really honest and not try to take advantage on others flaws which is great.


Even if you dont tend to give it back, once they do saw these winnings then that one will surely trigger out house red light and
they can anytime hold up your withdrawals as they like. Lucky for you if you do able to pull it out but in most cases
you would really be still in questioned if bets does really involved bug related things.

6.5 BTC is already big, just be grateful that you have that kind of bounty reward. It is proven that bug bounties do really pay big, but also depend on their budget and integrity as well.

Think about this man. 6.5 BTC x $9,200 = $59,871

I think in Philippine peso, it’s kinda almost P2.5 million peso. I would definitely take that as a bounty reward no matter what. Your honesty had them reward you with this amount. Congrats!