Pool luck?

[eleuthria]

Can it be "technically" (I have to stress, I am not accusing any legit pool out there actually doing so) done that say:
1. 1000 miners point there miners towards "Axx-Pool" with say 1 TH/s each; thus total hashing power should be 1 PH/s on the pool;
2. The Axx-Pool then show 1 TH/s on each miner's dashboard and graph and all the fancy stuff;
3. The Axx-Pool somehow, say, mine with these 1 PH/s on a "load-balance" strategy, with say 95% towards the publicly known address of the Axx-Pool, and 5% to a secret "Private-Axx-Pool" and keep that part?

Both Stratum and GBT provide the miner with the complete coinbase transaction, which means you can audit exactly what address(es) are getting paid by the work you're completing.  That doesn't mean a bad pool can't still be filtering off hashrate, but they could not do it in complete secrecy.  It only takes one user paying attention to reveal the theft if it was happening.

[bitcoinbearhk]

Can it be "technically" (I have to stress, I am not accusing any legit pool out there actually doing so) done that say:
1. 1000 miners point there miners towards "Axx-Pool" with say 1 TH/s each; thus total hashing power should be 1 PH/s on the pool;
2. The Axx-Pool then show 1 TH/s on each miner's dashboard and graph and all the fancy stuff;
3. The Axx-Pool somehow, say, mine with these 1 PH/s on a "load-balance" strategy, with say 95% towards the publicly known address of the Axx-Pool, and 5% to a secret "Private-Axx-Pool" and keep that part?

Both Stratum and GBT provide the miner with the complete coinbase transaction, which means you can audit exactly what address(es) are getting paid by the work you're completing.  That doesn't mean a bad pool can't still be filtering off hashrate, but they could not do it in complete secrecy.  It only takes one user paying attention to reveal the theft if it was happening.

Cool !!! Would love to see somebody with the experties comes up and do some audit on the major pools someday, that would be interesting 

[eleuthria]

I should say, it only takes one of the users being sent to "PrivateAddressXYZ" paying attention.  Obviously if they're sending 5% to another address like in your example, you'd probably need multiple people.  Mixing account ages/speeds as well, in order to have a good spread of candidates in case the pool is using certain criteria in order to pick which users to send somewhere else.