We have finally made it. After we got hacked over two weeks ago, we have reviewed every aspect of our security system. To test our work we have asked both the original hacker and the general public to break into our system - nobody succeeded. At this point I think it is safe to say that FastSlots is among the more secure bitcoin casinos. I'm really happy that this is over. The last weeks have been quite stressful to be honest. But I have also experienced an incredible amount of support from this forum. This has ranged from people I did not know that would just leave a friendly comment here in the thread, to a group of trusted users that have spent hours analyzing the hack together with me. I am deeply thankful for this and will try to repay over time. Now that we are back we are changing our name to FastBets.io. The main reason for the change is that we do not want to focus on slots in the future, but on experimental games instead. For our users not much will change, accounts are carried over and if you go to fastslots.co you will be directed to fastbets.io. Enough said, I'm glad we're back, hope to see you guys around in the chat :-) Henry |
|
|
|
lol, I'm an idiot, that would have been the way to do it. Too late now I guess :-)
lol, atleast you know to do it in the future isnt it  I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done Or the attacker doesn't take the 0.01 BTC, writes down his method somewhere and waits for the website to go live. After that it's just a waiting game to get a nice amount in the hot wallet, after which they can either steal everything or constantly take a small part from the hot wallet. You are right, but the same thing could be applied for now as well, I could save the exploit for later until the sites goes live, the amount of the hot wallet must be higher than 0.5 btc right?  it seems that way for me, hope no one gets into the site after it goes live @shulio: That is exactly what I am trying to prevent with this campaign. From the hackers perspective it's a risk to wait bc some other hacker might jump in, get the 0.5, and I'll be able to fix afterwards. @Mitchełł: Actually, our hot wallet will not be much bigger for a while. We'll just manage it more actively where we increase the bal if it is too low and decrease the bal when it is too high. |
|
|
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. Nah 0.5BTC not worth the effort. effort of hacking into it? its 100$+ , which I think is a nice amount and not to said that you might receive an additional if you can either tell fastslot about the vulnerabilites or also help to fix them. To Henry, I will be trying this one too, althought Im not sure If I will be able to get them. Thanks Shulio! I also think that 100$+ is not too bad as a bug bounty. If you like to play at FastSlots you get the added benefit that once this is over you will know that you are playing at a secure site :-) yes it is not a bad prize, but what if there might be someone who will be able to hack the 0.5 bitcoin but does not let you know what the vulnureabilities is and try it again after the sites goes live?This could get the sites to be hack once more after it goes live That is true, but we are logging stuff like crazy now so it is likely that we will be able to figure out what happened. No matter what we do, there is no such thing as 100% security. The idea is just to be more secure than other casinos so that attackers turn away from us... I see, so I got an idea for next time if you will to hold such contest again, you should probably only put 0.01 in the hot wallet with the rules, whoever hack the 0.01 from the hot wallet may keep it but if he tells us how he do it, another 0.49 will be rewarded for him. This will make the attacker needs to tell you how the exploit is done lol, I'm an idiot, that would have been the way to do it. Too late now I guess :-) |
|
|
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. Nah 0.5BTC not worth the effort. effort of hacking into it? its 100$+ , which I think is a nice amount and not to said that you might receive an additional if you can either tell fastslot about the vulnerabilites or also help to fix them. To Henry, I will be trying this one too, althought Im not sure If I will be able to get them. Thanks Shulio! I also think that 100$+ is not too bad as a bug bounty. If you like to play at FastSlots you get the added benefit that once this is over you will know that you are playing at a secure site :-) yes it is not a bad prize, but what if there might be someone who will be able to hack the 0.5 bitcoin but does not let you know what the vulnureabilities is and try it again after the sites goes live?This could get the sites to be hack once more after it goes live That is true, but we are logging stuff like crazy now so it is likely that we will be able to figure out what happened. No matter what we do, there is no such thing as 100% security. The idea is just to be more secure than other casinos so that attackers turn away from us... |
|
|
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. Nah 0.5BTC not worth the effort. effort of hacking into it? its 100$+ , which I think is a nice amount and not to said that you might receive an additional if you can either tell fastslot about the vulnerabilites or also help to fix them. To Henry, I will be trying this one too, althought Im not sure If I will be able to get them. Thanks Shulio! I also think that 100$+ is not too bad as a bug bounty. If you like to play at FastSlots you get the added benefit that once this is over you will know that you are playing at a secure site :-) |
|
|
|
To everybody that has just jumped in: I'm asking people to hack into my new server. You can find it at https://190.10.8.124:8443. There are 0.4999btc in the hot wallet that a successful could keep. There will also be a bounty if the attacker can explain what he did and work with me until it is fixed... "Your connection is not private" I guess its not time for me ti visit  The problem is that our ssl certificate does not work if you just type in the ip address into the browser. The connection will be private once we officially relaunch when the security testing is over... |
|
|
|
To everybody that has just jumped in: I'm asking people to hack into my new server. You can find it at https://190.10.8.124:8443. There are 0.4999btc in the hot wallet that a successful could keep. There will also be a bounty if the attacker can explain what he did and work with me until it is fixed... |
|
|
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. Nah 0.5BTC not worth the effort. so how much would be better for this kind of effort? Henry can offer you more if you get succeed with hack the server. It's a bit strange for me to say that but I actually wish good luck to everybody trying to hack me as well :-) People try to hack into bitcoin casinos all the time and I'd rather have the money go to someone in the community. Once this is over FastSlots will actually be a very secure casino, and I'd like to reach this level as fast as possible. Hence this "competition". @yakuza699, true, 0.5 is not a lot for a hack. However someone might jump in and find the last remaining issues and there might not be anything to get later... @Havelivi, I will offer a bounty to the person that can demonstrate that he/she can get money. That amount will depend on the kind of attack and will be discussed with the attacker after the hack |
|
|
|
FastSlots, can you send me a PM with details on how to participate in trying to hack your server?
Hi Mitchełł. I can actually tell you publicly right here: the server is at https://190.10.8.124:8443. Just try and get it :-) The address of our hot & cold wallets are below. So far nobody has been able to take something, but that might obviously change... In case someone tries and fails, would be super nice if people could leave a comment in the tread. ____ Message: FastSlots Hot Wallet Address: 13Va2HJUib6SSxZFBqoT6BoZPDSp8VkUEJ Signature: IEhC+2tCCWljcJ3EuIOcJA5yiCSmwQpK2QiXbEhUJnQpJ7XRr1n+vwI/5SUR2eZmd7UDSE8drLqk1e+z2d6JSJw= Balance: 0.4999 BTC (this is what you can get by hacking) Message: FastSlots Cold Wallet Address:1JHbVn7W9DUXn6ZnfqhsGJWhhfNxNTtWdb Signature: H/IT4PuIdYLaY47NrwXqslHjTsuuBl20/bkQdtbwKN+xLMhohPG6SHsquVKRFRqtmWjFaEvva5LmTN93j5M4BJI= Balance: 4.7 BTC |
|
|
|
So I can I take the hot wallet and you won't mind it?And I will get extra 0.5 if I tell you how I did it.Sounds good.How many btc's in hot wallet again?
The hot wallet holds 0.4999btc atm. I'd prefer you to tell me for free if you can take it but that would be up for discussion. |
|
|
|
please sent me an invitation too, i really want to test the new fastslots i am so happy if i can to be a beta tester for fastslots  thank you before no need for invitation link to play there as Henry post above the server address to fastslot https://190.10.8.124:8443so you can test it without any special invitation  thank you trafficolaa for your reply i was visit there and i can login with my old account and fastslots working faster thank before i guess, it is so great work Hi Syahrere, sorry about that. Please email me your username and I'll get you sorted. ( henry@fastslots.co) If anyone else has problems with the login please let me know. I have updated our database access layer wich has affected the login, so there might be a bug there that I could not find. I can't login either with my user (user: LiQuid ). Btw i have found some vulnerabilities but i haven't try to exploit them. Too busy at the moment. I will send you more info when i have some time. Hi LiQuidx, I just emailed you about your password. As I said, if you can steal money from the hot wallet I don't mind if you keep it. However I'd invite you to do so now :-) If you have found a vulnerability that does not allow you to steal money, you'll still qualify for a bounty... Hey Henry. I have replied to your mail. Unfortunately i can't test it further now since i'm at work and i don't have the time to. Will inform you later about the vulnerabilities though. Hi LiQuidx. Just sorted out your account. It's great to be in touch with someone who finds a vulnerability and chooses not to exploit it :-) Thanks a lot for that. Looking forward to hearing more whenever you have time... |
|
|
|
please sent me an invitation too, i really want to test the new fastslots i am so happy if i can to be a beta tester for fastslots thank you before no need for invitation link to play there as Henry post above the server address to fastslot https://190.10.8.124:8443so you can test it without any special invitation thank you trafficolaa for your reply i was visit there and i can login with my old account and fastslots working faster thank before i guess, it is so great work Hi Syahrere, sorry about that. Please email me your username and I'll get you sorted. ( henry@fastslots.co) If anyone else has problems with the login please let me know. I have updated our database access layer wich has affected the login, so there might be a bug there that I could not find. I can't login either with my user (user: LiQuid ). Btw i have found some vulnerabilities but i haven't try to exploit them. Too busy at the moment. I will send you more info when i have some time. Hi LiQuidx, I just emailed you about your password. As I said, if you can steal money from the hot wallet I don't mind if you keep it. However I'd invite you to do so now :-) If you have found a vulnerability that does not allow you to steal money, you'll still qualify for a bounty... |
|
|
|
please sent me an invitation too, i really want to test the new fastslots i am so happy if i can to be a beta tester for fastslots thank you before no need for invitation link to play there as Henry post above the server address to fastslot https://190.10.8.124:8443so you can test it without any special invitation thank you trafficolaa for your reply i was visit there and i can login with my old account and fastslots working faster thank before i guess, it is so great work Hi Syahrere, sorry about that. Please email me your username and I'll get you sorted. ( henry@fastslots.co) If anyone else has problems with the login please let me know. I have updated our database access layer wich has affected the login, so there might be a bug there that I could not find. |
|
|
|
I'm very happy to see that my coins are still there :-).
I can see from the logs that quite a few people have tried to hack us but nobody has been successful so far. If all goes well we'll relaunch tonight!
that is nice to hear fastslot has now more secure server than ever and will happy to see back online today for all players. ggod luck Henry you have nice support there Thanks Havelivi, I love doing support. It's the best way to figure out what people want. Although nobody had mentioned that explicitly, not being hacked would be quite far up on that list I guess :-) I don't want to get too optimistic at this point, but the security on FastSlots has increased dramatically over this incident. I'm very happy to see that my coins are still there :-).
I can see from the logs that quite a few people have tried to hack us but nobody has been successful so far. If all goes well we'll relaunch tonight!
awesome news fastslot will be relaunch tonight and will be back online with more fast and secure server, i tested in beta phase betting speed is pretty fast so best of luck for this relaunch. I'm glad to hear that Amiryaqot. I'm kind of happy with the betting speed, but page load time is still too slow. Will be addressed after relaunch... |
|
|
|
|
I'm very happy to see that my coins are still there :-).
I can see from the logs that quite a few people have tried to hack us but nobody has been successful so far. If all goes well we'll relaunch tonight!
|
|
|
|
Hi guys, Thanks for all your comments. I usually try to reply to all comments as soon as possible, but did not make it today. As for the beta phase, it's been going good, nobody has found a security issue yet. For this reason I'm gonna host a slightly unusual competition today: Please break into FastSlots. You can keep the 0.5 bitcoin in the hot wallet if you make it. You can find the test server at https://190.10.8.124:8443This will not affect any money that has been deposited by users as I have an additional 4.7btc in a cold wallet (see below). I should also note that this is a test server, and there are still stability issues (please excuse disruptions in your hacking activities ;-). If you try and do not get in, it would be highly appreciated if you could leave a short message here to let people know. If this goes well we'll have our grand reopening tomorrow. Wish me luck :-) _______ Message: FastSlots Hot Wallet Address: 13Va2HJUib6SSxZFBqoT6BoZPDSp8VkUEJ Signature: IEhC+2tCCWljcJ3EuIOcJA5yiCSmwQpK2QiXbEhUJnQpJ7XRr1n+vwI/5SUR2eZmd7UDSE8drLqk1e+z2d6JSJw= Balance: 0.4999 BTC (this is what you can get by hacking) Message: FastSlots Cold Wallet Address:1JHbVn7W9DUXn6ZnfqhsGJWhhfNxNTtWdb Signature: H/IT4PuIdYLaY47NrwXqslHjTsuuBl20/bkQdtbwKN+xLMhohPG6SHsquVKRFRqtmWjFaEvva5LmTN93j5M4BJI= Balance: 4.7 BTC |
|
|
|
I want to tst your site. Pls send an invitation.
Hey jackringer, sure thing. Just sent you the link by pm. |
|
|
|
Sorry... Something went wrong. Please try reloading the page and contact support@fastslots.co if the problem persists. We apologise for the inconvenience. Again site is down. Suddenly happened appeared this. fruit slot worked fine this time. Yeah, these are the stability issues I'm working on. Restarted the server and should be fine for now. |
|
|
|
nice to hear about beta testing about fastslot, i would like to test it and i am also waiting for invitation about it.
Hey. I can also join the beta testing can i get an invitation to check it too? i played here before would like to check it again
Yeah this was great experience to be part of beta testing. I will wait and love to be invited once again after all the things will be fixed . Best of luck .
Hey Havelivi, LiQuidx, 98problems, boopy265420! Awesome, welcome to the team! I just sent you the link to the server by pm. As far as I know everything should work fine now. I'm currently working on some stability issues, but functionality-wise everything should be ok. Please let me know if you find anything. By the way, the site should be fully functional, so you can deposit and withdraw, create accounts, ... (just saying cause people have asked). The only difference is that the hot wallet is restricted to 1 btc and the max bet limit is a bit lower than usual. Should anyone win more just email me :-) If anyone else (member & above) would like to join, just let me know... |
|
|
|
Arghh, server died. I'm restarting now and will have a look at what happened...
I think you must renew the server since its been hacked once and try to make it secure to all of us so we can play it nice and savely Btw please invite me when the server is back to online. I think Im gonna try it again. Lets see whats going on again Hi BTCevo, great point. Luckily that's exactly what we did :-) We started from a completely fresh server, have replaced all passwords, have updated all software to the newest version, made it _much_ harder to get in, and many other things. I'm currently fixing some more issues that are not security related but instead have to do with all the stuff we updated. Will invite you once these are resolved... |
|
|
|
|
Show Posts
