|
I just want to emphasize that this site is not provably fair.
It also has indeed a 7.5% house edge, which is relatively high for a simple dice-like game (but covers the mining fee too I guess?)
Why is this site not provably fair?
It uses timestamp and unverifiable third-party data for the bet results. It is very easy for the site to slightly change this data (just a few milliseconds later) to make you lose.
Example
Imagine I am betting EVEN. The bet result is: sha256(BTC/CNY:TIMESTAMP:VOLUME:TXID) Let's say the site picks the following input data:
BTC/CNY: 5436.23
TIMESTAMP: 1481781996
VOLUME: 957326.6386
TXID: de1f78ed0e2fdb557458a4af1aecf17d73b06df8ed51cd0d14919dcf995b4175
This results into: ebbc2a4ec2ec8b82336cb8b51f32dd3d523f7bac5da76bac0629123e44ac2fea
As you can see, the first digit is EVEN so I should win.
Now the problem is, BTCC has many many trades PER SECOND. So if I win with this input data, it is very easy to just get the trade data from a few milli seconds later. Because a few milliseconds later, another trade is done - making the BTC/CNY price and VOLUME different. This results into a completely different result. For example, the data of a few milliseconds later would result into:
BTC/CNY: 5436.24
TIMESTAMP: 1481781996
VOLUME: 957326.7386
TXID: de1f78ed0e2fdb557458a4af1aecf17d73b06df8ed51cd0d14919dcf995b4175
This results into: 55f0fc73a8a239662184f0873dfe93574591f4542ad72b3f66617f3e877294a7
So by just getting the input data of a few milliseconds later, they can make me lose.
That's why you cannot use unverifiable third-party data like this. Even the timestamp is unreliable, because there is no fixed timestamps on transactions, so it's very easy to remove or add 1 second.
I am not claiming the site owner is doing this. But calling this site "provably fair" is just not correct. If you want to make your game provably fair, you should look how other on-chain games do it, like luckybit.
|
|
|
|
Note that the expected profit for investors is 30% of the house edge. So like a 70% commission based on wagered - not on profits (= extra variance  ) This is calculated on my site completely based on stats but also described in the MP FAQ: What commissions do you charge?
MoneyPot charges 20% commission on the house edge of all wagered bets. Furthermore to this, all apps are paid a commission of up to 50% of the house edge. So this means if someone bets 1 BTC with a house edge of 1%, from the investors perspective it is much more similiar to a 0.3% house edge bet, as the investors give the app half the house edge (in this case 0.005 BTC) in comission and 20% of the house edge to Moneypot. IMO it is not necessarily unfair as long as it's clear to investors (and FAQ seems clear to me.) It's up to the investors to "invest" money or not. Personally I never really invested because it doesn't seem worth the risk based on expected (with that commission.) But still there is 765 BTC invested, so I guess some still find it acceptable. |
|
|
|
~snip~
Is it the same owners and operators now as it was then. Do they have any proof where they have the btc to pay out?
Yes, alex still the owner of Bitdice until now. Here's the proof about that guy who won 500 BTC on Bitdice https://bitcointalk.org/index.php?topic=1273407.0yes but where is the proof that they have money today to pay out such a large sum. BitDice is a crowdfunded dice site. Currently there is 2,850 BTC invested. The following 2 addresses are from BitDice and contain 88% of those funds: 146syqE3vnfQp4VauBRUnUuAgvxMoitxcK - 1,500 BTC 1P8yKwe4LMRfy1kCBgC97w6Z3D3cNLYbxg - 1,000 BTC |
|
|
|
We have added IP whitelisting in order to make your account and experience more secure at Betcoin.ag The feature is so unique, so it can prevent some hack cases happen, an innovative feture. Did you see this feature in other sites so far? BitDice has it and actually created a hack event to prove/promote this feature just 4 days ago: https://bitcointalk.org/index.php?topic=1706900.0 So it seem to me Betcoin.ag saw this and added it to their own site Overall I couldn't care less where they got the inspiration for this feature... it's obviously a good trend to see more gambling sites implement such security features  |
|
|
|
Oh nice feature but if someone really wanted to get into someones account and got a hold of their account my guess is their computer was infected.
So they could just login remotely through the users profile and cash out, in most cases if you got their password they got keylogged which means they likely got that email pass.
I think the most common way to obtain someone's password is by a database leak and by using the same password on multiple sites. So: 1) hack some (more insecure) bitcoin site 2) get usernames/passwords 3) try on all gambling sites. Another example: I could create a faucet site, "get some free bits by just signing up". Meanwhile I am obtaining all usernames/passwords from those users and try them on gambling sites (and exchanges etc.) Also phishing sites are pretty common, but so far mostly for blockchain.info and bitcoin exchanges (haven't seen many for gambling sites yet.) I think those situations are more common than some targeted keylogger. For those situations, this protection by BitDice works pretty well. Still if they use the same password for their email... obvious they can still be hacked |
|
|
|
Wow nice bounty offer you got there but I wish I was a skilled programmer and I have read that NLNico is the one who help Baryom for his bitsler website for this security measures and Baryom vouch him for good work, maybe he can help you for this thing. As quoted below, As bitsler's main admin, I can vouch for NLnico who have made a great work with us. He is very skilled and professional. He gave us full explanation + fix.
Thanks again !
Thanks I actually tried some basic things right after seeing this thread, but I am afraid I am unable to bypass this device/IP-check  one more security feature of sms authorization SMS is actually really insecure way: http://blog.kraken.com/post/153209105847/security-advisory-mobile-phones non-SMS 2FA is much better. |
|
|
|
Note: although the total stats show 81% of expected profit, for investors this actually results into 39% of expected profit (since apps have no variance-risk.) I assume the opposite is true too.. if a player loses a lot, app gains little while investors profit a lot. Note2: JD was running at 36% of expected profit after 5.3M BTC wagered, so this is nothing yet |
|
|
|
Lol, guys, "hacker" doesn't mean someone is a criminal. I have found and reported security vulnerabilities on plenty of bitcoin sites (bitcointalk, poloniex, primedice, betking, bitsler, crypto-games, bitdice, nitrogen and many more.) I normally only work on a bug bounty basis (pay per bug found based on potential damage, nothing found is no payment.) Obviously I will only test the site if you are the owner. You can PM me details if you want me to have a look. No.Don't trust any wannabe hackers here.Neither I've heard of a hacker in this forum who actually knows shit.Ignore all the inbox messages you will get.All wannabe kids. Well.. I do have a fancy hacker emblem under my name *brag brag* But they say more than 90% of the bug reports on a public bug bounty program are wrong/fake/no-context/etc. - so I agree with the sentiment of "many wannabes out there" |
|
|
|
Quoting "seuntj ie" and still call him "seuntje".. damn xD (Okay, took me more than a year to remember his name correctly too  ) |
|
|
|
nowadays altcoins are used in gambling in parallel to bitcoins bitsler.com (check my signature ) allows to gamble using DOGE,ETH,LTC and of course,bitcoins the more popular a cryptocurrency is the more casinos and sites are using it https://dicesites.com/ here is a list of dice sites with volumes,check yourself which coin is popular Yeh, my site is missing some sites like bitsler and crypto-games that accept alt coins. The latter did have some ETH volume (5k btc worth vs 27k actual btc wagered.) But overall the alt coin gambling volumes are not much compared to bitcoin gambling AFAIK. |
|
|
|
Forum also has time bbcode From November 28, 2016, 12:00:00 AM till November 29, 2016, 12:00:00 AM^ = automatically in user's own time based on their forum time setting. [time]1480291200[/time] till [time]1480377600[/time] |
|
|
|
|
I tested it a bit and it seems like the password doesn't work anymore if it contains a "&" (and likely other special characters.) So yes, they will have to fix that.
|
|
|
|
Username: NLNico
Thnx.
done
I actually don't have edit permission yet, could you check it? Thanks. |
|
|
|
|
As investor I made way more money with XMR than BTC though :p Partly because of that 120 BTC win obviously. And XMR wagered was much more in beginning too (compared to this year.)
|
|
|
|
Lets Move on to primedice
Maybe a few remember the 5BTC Rain guy. Mrvxxxxxx88 Dont find the post atm. He Start with 4 BTC and was +400 "MrVincenzo88" https://pd3.co/users/MrVincenzo88 + BTC303. I do vaguely remember he lost (a lot) on another account too though :x But I do not really follow "who is who" so might be wrong. My Last stop for the Moment Is pocketdice. Also a guy that was 30 down ends up 200 up before he go Down to 120 again but i have no time to Search the post. Right, "Chelshin". On those sites the "max profit per bet" is relatively lower though (like 15 - 30 coins.) But still someone can make nice profit overall obviously bitcoinvideopoker indeed has some nice jackpot wins sometimes too. |
|
|
|
I doubt someone who lost 1200 coins wants to talk about "biggest bitcoin winners 2016" :x I was mostly just sharing information, so if your article will feature someone who won 70 coins in 1 bet - that would be cool - but at least you got the information that there has been bigger bets this year. I also just gave 1 example, but definitely has been more betting like that. The example of JPR "NotTardy" probably has been the luckiest big win though btw - potentially more interesting for some article (although not literally the biggest win.) Player wins BTC72 with BTC0.00000900 bet, does sound pretty interesting. Also the most suspicious win, but I just assume MP verified everything correctly :X Actually it might share the "most suspicious win" together with the BTC115 win on SafeDice :X (which by odds was much less lucky though.) |
|
|
|
If you go through the BetKing topic, there are some screenshots of big bets in 2016. Like this one in September:  I don't really think there are a lot of bitcoin casinos able to pay BTC250 per bet, so this might be literally one of "biggest single bet wins" in 2016. Do note that (some of) those whale might end up losing overall though.. so I wouldn't say that those who had "big single bet wins" are necessarily the biggest bitcoin winners (perhaps the opposite - see: next screenshot of "roadcone" -1200 overall.) |
|
|
|
|
Site owner has been gone for a year. Luckily you made only a small deposit, because I am afraid that money is gone.
|
|
|
|
Edit: I got a message from another person (SATMAS), was told that hopefully soon. <-------- Fake, phished accounts
..
I got a PM from an userID: SATMS He phished my account.
..
Reply to this Personal Message here: ....u=664980
Really? From "satmas" - this user: https://bitcointalk.org/index.php?action=profile;u=664980 ? Added negative trust to this guy for now, but would be good if you can confirm the exact account. Also if others got the same PM, this would be useful. Potentially you can report the PM too so the admins can easily see it and confirm the account (afaik.) |
|
|
|
|
Show Posts
