I have ran simulation for this cases, and don't see any issue with it.... Am I missing something....
you claim to have run a simulation with an adequate sample size to prove each of these cases within minutes? an adequate sample size to prove these would be hundreds of thousands of bets, and I doubt your small server is capable of handling that. yes, you are missing something, its called math. |
|
|
|
Ok we found issue and it was small bug, nothing to make you rich in a few hours or smth....  We will give 1 BTC as someone reported it on chat. But if you can't decide who gets reward, we will split that BTC to all involved... IMO subSTRATA is the one who deserves the reward. @subSTRATA - you should post an address for transparency purposes. see further in the thread. |
|
|
|
|
heres how bad it is, credit goes to dooglus for compiling this:
multiplier, win chance, edge
6613x 0.02% 32.26%
3968x 0.03% 19.04%
2834x 0.04% 13.36%
2204x 0.05% 10.20%
1803x 0.06% 8.18%
1526x 0.07% 6.82%
1322x 0.08% 5.76%
1167x 0.09% 5.03%
1044x 0.10% 4.40%
944x 0.11% 3.84%
862x 0.12% 3.44%
793x 0.13% 3.09%
734x 0.14% 2.76%
684x 0.15% 2.60%
640x 0.16% 2.40%
601x 0.17% 2.17%
566x 0.18% 1.88%
536x 0.19% 1.84%
508x 0.20% 1.60%
483x 0.21% 1.43%
461x 0.22% 1.42%
440x 0.23% 1.20%
422x 0.24% 1.28%
404x 0.25% 1.00%
389x 0.26% 1.14%
374x 0.27% 0.98%
360x 0.28% 0.80%
348x 0.29% 0.92%
336x 0.30% 0.80%
325x 0.31% 0.75%
314x 0.32% 0.48%
305x 0.33% 0.65%
296x 0.34% 0.64%
287x 0.35% 0.45%
279x 0.36% 0.44%
271x 0.37% 0.27%
264x 0.38% 0.32%
257x 0.39% 0.23%
251x 0.40% 0.40%
244x 0.41% 0.04%
239x 0.42% 0.38%
233x 0.43% 0.19%
228x 0.44% 0.32%
218x 0.46% 0.28%
213x 0.47% 0.11%
182x 0.55% 0.10%
|
|
|
|
If someone were to exploit/employ the +EV strategy on your site, then it would appear that they are simply getting lucky. Also there would be nothing that would stop someone from making small amounts of money across multiple accounts so they would each be under the radar.
Based on posts in this thread, it looks like the OP was offered a total of .5 BTC for his disclosure.
there were 2 bugs, 1 for the +EV bug and a second bug that dooglus found that would allow for players to manipulate some bet data to exceed that parameters set by the site, which i thought 1.5 BTC in total would be more than fair for the disclosure and explanation of these, but upon hearing of the second bug, the admin started getting rather hostile in tone and dissuaded me from accepting any sort of deal. Well, the EV Bug was so easy to find that it was revealed by a player. Still watching this thing though. Was the EV bug leaked? If so then what was it? If not then don't leak it. it was a simple rounding error; the site's client allowed the player to choose a multiplier up to 6500x, every number inclusive. however, their % win chance was rounded to the hundredth place (decimal), allowing for a 0.02% win chance on a 6500x roll, when the correct multiplier for such a roll should be around 5000. this is the worse case scenario allowing for a 30% edge, but as dooglus pointed out above, the second bug allows for even more of an edge. |
|
|
|
We are pretty confident in our code.
Sure you are and now there are many bugs to find  if i were in his position, i would be scouring the code line for line at this moment; as i mentioned before in the thread, there is another bug that dooglus found (all credit goes to dooglus on this one) that allows a player to manipulate their bet to exceed the parameters given by the client. this is all client-side. that alone should be a gigantic red alarm for any developer, especially one that is "confident in their code." |
|
|
|
If someone were to exploit/employ the +EV strategy on your site, then it would appear that they are simply getting lucky. Also there would be nothing that would stop someone from making small amounts of money across multiple accounts so they would each be under the radar.
Based on posts in this thread, it looks like the OP was offered a total of .5 BTC for his disclosure.
there were 2 bugs, 1 for the +EV bug and a second bug that dooglus found that would allow for players to manipulate some bet data to exceed that parameters set by the site, which i thought 1.5 BTC in total would be more than fair for the disclosure and explanation of these, but upon hearing of the second bug, the admin started getting rather hostile in tone and dissuaded me from accepting any sort of deal. Well, the EV Bug was so easy to find that it was revealed by a player. Still watching this thing though. so it would seem, it really wasnt that hard to see honestly, was more so wondering why that was even there in the first place. im expecting that to be fixed rather quickly, which is good for their script, but as for their publicity, thats rather questionable. |
|
|
|
If someone were to exploit/employ the +EV strategy on your site, then it would appear that they are simply getting lucky. Also there would be nothing that would stop someone from making small amounts of money across multiple accounts so they would each be under the radar.
Based on posts in this thread, it looks like the OP was offered a total of .5 BTC for his disclosure.
there were 2 bugs, 1 for the +EV bug and a second bug that dooglus found that would allow for players to manipulate some bet data to exceed that parameters set by the site, which i thought 1.5 BTC in total would be more than fair for the disclosure and explanation of these, but upon hearing of the second bug, the admin started getting rather hostile in tone and dissuaded me from accepting any sort of deal. |
|
|
|
We said we would pay you 1 btc and no more. But you didn't want to talk about it. So we have decided we won't talk with you either. We will have to wait for you to start earning "serious money", then we will fix it. But as you can read in terms, every exploit or bug should be reported and abuses are not allowed. If we see you abuse it you will stay without your funds.
It is your bad that you didn't want 1 btc, not ours.
and it is also your problem that you practically killed off your own site. you just publicly stated that you will not pay out, right there. say good bye to crypto-games.net. |
|
|
|
big point here; even if they decide to pay out, their decisions in handling this entire matter were questionable at best, announcing their site as the subject of this thread was probably the biggest mistake, this is a lose-lose situation for them now.
Don't get me wrong, the owners of this site are giant morons, acting unimaginably unprofessional. They've basically gone all dadice, and made themselves toxic to anyone with a few braincells after the way they are acting now. But after seeing the nature of the exploit, it's obvious why you're acting like you are. You didn't exploit it, because you didn't think you could get away with it for long enough to make any money. And you didn't mention the site name, not out of fear of shaming them but because you knew the exploit was easy to find and didn't want anyone to give it to them for free. youre free to think what you want; but i didnt try and exploit it in any way after seeing it. i honestly tried to help the admin out but he dissuaded me from doing so. anyways, this has escalated into a rather interesting event. |
|
|
|
Not sure if you understand how our system works. But one thing is sure, investors have priority before players. And almost all of our funds are on cold wallets. So all will receive their funds if they want to withdraw it.
thats good then, at least you ensure the safety of your investors' funds. |
|
|
|
I am not even sure that I would trust the site to pay out large wins that a +EV strategy would result in. The site is very new, has a tiny bankroll, and is acting very unprofessionally.
big point here; even if they decide to pay out, their decisions in handling this entire matter were questionable at best, announcing their site as the subject of this thread was probably the biggest mistake, this is a lose-lose situation for them now. Yeah, and it's not only them at risk, but also investor's money. Them being "confident" is totally going to bring a lot of people down. Time to take a couple of last looks at the site lol. great point, after this, their site is dead regardless of the outcome. inviting people to come and dump your bankroll and not even consulting with your investors? that's some special publicity right there. How do you know we didn't notify our investors? Did you ask them? We have notified every single investor on site. in my opinion, before pulling this sort of stunt you should notify your investors ahead of time and give them time to process their withdrawals, just go and pull the trigger and invite people to dump their investments. judging from the timeframe between the messages and the announcement you made, your investors had little to no time to make a decision regarding the matter. |
|
|
|
I am not even sure that I would trust the site to pay out large wins that a +EV strategy would result in. The site is very new, has a tiny bankroll, and is acting very unprofessionally.
big point here; even if they decide to pay out, their decisions in handling this entire matter were questionable at best, announcing their site as the subject of this thread was probably the biggest mistake, this is a lose-lose situation for them now. Yeah, and it's not only them at risk, but also investor's money. Them being "confident" is totally going to bring a lot of people down. Time to take a couple of last looks at the site lol. great point, after this, their site is dead regardless of the outcome. inviting people to come and dump your bankroll and not even consulting with your investors? that's some special publicity right there. |
|
|
|
I am not even sure that I would trust the site to pay out large wins that a +EV strategy would result in. The site is very new, has a tiny bankroll, and is acting very unprofessionally.
big point here; even if they decide to pay out, their decisions in handling this entire matter were questionable at best, announcing their site as the subject of this thread was probably the biggest mistake, this is a lose-lose situation for them now. |
|
|
|
Well it seems that the name of the site has leaked (by the owner of such site).
Can you possibly say if the method would require someone to bet very small (or very large) amounts of money, or is the method one that would allow someone to have the positive EV with any bet size?
The site in question is very new and I am not 100% sure they would even pay out in the event that someone won a large amount of money. Their entire BTC bankroll is only around 30 btc or so.
i wont say anything publicly for now, and just having +EV does not guarantee a complete dumping of their hot+cold wallets. given the exchange we (the site's admin) went through earlier, I also question if they would pay out now. Quickseller I trust you enough on the forum, so i may pm you later regarding this, i might forget though so please do pm me to remind me of this later on. |
|
|
|
What if they found about it and got fixed it ASAP then the method will become pointless/useless this may cause a problem in your part Subtrata.
thats true, but judging from his hostility the admin is hes scrambling to find it and panicking. ive already offered just 1 BTC to give the details of the bug allowing for +EV bets, and another .5 BTC for a more serious bug found by dooglus. the implications of the second bug will not be disclosed for obvious reasons, but given the severity of these bugs, id think the price offered was completely reasonable. im fine with accepting the offer given, but that's not up to me; dooglus holds the details regarding the second bug ad i believe he has gone to sleep for the time being. until then, this is up for grabs. if dooglus is fine with accepting the proposed deal, so am i, but after this, i really have a negative impression of the site's admin in regards to professionalism and trust. until dooglus gives me word that he is fine with this, its up for discussion, but either way, i will be giving dooglus a percentage share of the bounty for his immense help with this issue. We are pretty confident in our code. We log many different hack attempts every day. Exploit it please, and earn 1 btc. When you do we are willing to pay you 1.5btc extra to tell us about it. We are tired of this lame scam attempts. We get mails of exploits weekly, but no one proved or steal anything. Only reason why we offered you any amount is because you have others users backing you up. if you dont believe dooglus's words, then i honestly think you guys are extremely cocky, we have confirmed that it is possible to get an edge playing on the site. I was trying to keep your guys's identity hidden, but you up and came out with it yourself, let the free-for all begin i guess. Lol. Foolish remark on Crypto-Games' side. A bug or an exploit shouldn't be taken lightly, especially when it involves money. @subSTRATA make it rain when you prove this cocky admin wrong Yeah make that 1 btc you got rain. When you do, we'll talk with you further. Till then good luck. ill consider that as an invitation for me and dooglus, we'll start when hes awake. |
|
|
|
What if they found about it and got fixed it ASAP then the method will become pointless/useless this may cause a problem in your part Subtrata.
thats true, but judging from his hostility the admin is hes scrambling to find it and panicking. ive already offered just 1 BTC to give the details of the bug allowing for +EV bets, and another .5 BTC for a more serious bug found by dooglus. the implications of the second bug will not be disclosed for obvious reasons, but given the severity of these bugs, id think the price offered was completely reasonable. im fine with accepting the offer given, but that's not up to me; dooglus holds the details regarding the second bug ad i believe he has gone to sleep for the time being. until then, this is up for grabs. if dooglus is fine with accepting the proposed deal, so am i, but after this, i really have a negative impression of the site's admin in regards to professionalism and trust. until dooglus gives me word that he is fine with this, its up for discussion, but either way, i will be giving dooglus a percentage share of the bounty for his immense help with this issue. We are pretty confident in our code. We log many different hack attempts every day. Exploit it please, and earn 1 btc. When you do we are willing to pay you 1.5btc extra to tell us about it. We are tired of this lame scam attempts. We get mails of exploits weekly, but no one proved or steal anything. Only reason why we offered you any amount is because you have others users backing you up. if you dont believe dooglus's words, then i honestly think you guys are extremely cocky, we have confirmed that it is possible to get an edge playing on the site. I was trying to keep your guys's identity hidden, but you up and came out with it yourself, let the free-for all begin i guess. |
|
|
|
the admin of the site seems rather hostile and is trying to rip both me and dooglus off, demanding a lower bounty for the deal, i am entertaining offers in this thread or through pm regarding this. a percentage of this will be paid to dooglus for his help in confirming this issue.
kind of like blackmail? they don't pay up so you sell the exploit? "heres my price take it or leave it lolol fk off" is basically the tone im getting from this guy. he seems rather hostile, which is dissuading me from helping his site out, which i believe the price I asked for for two very serious bugs was completely reasonable. how large is this site? How much is the max win? im not heartless; im not going to give any details as to what the site is. you expect people to give you offers. if its a casino with a max win of 0.01btc then good luck getting 5btc for this the max win is a lot more than that. its possible to get a lot more than 5 BTC potentially. |
|
|
|
the admin of the site seems rather hostile and is trying to rip both me and dooglus off, demanding a lower bounty for the deal, i am entertaining offers in this thread or through pm regarding this. a percentage of this will be paid to dooglus for his help in confirming this issue.
kind of like blackmail? they don't pay up so you sell the exploit? "heres my price take it or leave it lolol fk off" is basically the tone im getting from this guy. he seems rather hostile, which is dissuading me from helping his site out, which i believe the price I asked for for two very serious bugs was completely reasonable. how large is this site? How much is the max win? You already have a clue, a site that can't pay up 1-.5 BTC offer lol.. IMO subtrata's offer is generous if this were from a professional site they could pay him alot more for finding it. judging from the language used, the admin of the site completely distrusts me and dooglus at the moment (lol), and im thinking that its more that the admin is unwilling to pay rather than being unable to judging from the language he used. |
|
|
|
I heard this awesome news +EV is possible and this is very serious kind of bug but i would like to know more details about this bug how long it will take time to get in profit if someone get starting at any dice site from big bankroll.
32+% edge in favor of the player is no joke. and i mean really, thats pretty serious; thats like getting a 2x bet on a roll higher than 34 or lower than 66. i personally think something like this is worth far more than just 1 BTC. its not something that noticeable from the back end either, no doubt the admin is now monitoring this thread and everything i say  as for details, its gambling after all, profit is to be expected but it all depends on bankroll management and how much resources youre willing to dedicate to abusing this. even if this is somehow found and patched, its no loss to me; this isnt something i expected to find, and its not like i had anything to lose in the first place. if anything, ill take it as a lesson that these exploits are out there, even with all these improvements to dice scripts, and ill take it on myself to maybe find more of these such bugs and help out their casino owners. |
|
|
|
|
Show Posts
