RHavar (OP)
Legendary
 Offline
Activity: 2557
Merit: 1886
|
 |
July 31, 2015, 07:18:00 PM |
|
Are you able to say how they got the app secret?
Also I've sent you a PM
I'm not entirely sure they used the app_secret was leaked, unfortunately i don't log the authentication mechanism in the API. Either that, or all the betterbet's users access tokens. I'm waiting on the betterbets developer to get online so we can discuss and finish piecing together exactly what happened |
Check out gamblingsitefinder.com for a decent list/rankings of crypto casinos. Note: I have no affiliation or interest in it, and don't even agree with all the rankings ... but it's the only uncorrupted review site I'm aware of. |
|
|
RHavar (OP)
Legendary
Offline
Activity: 2557
Merit: 1886
|
|
July 31, 2015, 07:19:59 PM |
|
does this mean that an app owner a she knows his app_secret could tip away
all his customers coins?
Yes, hence the warnings =) An app owner has full control of the money that is deposited on their app, until it's been pulled back into the moneypot account. We authenticate the app using an app_secret, so if this ever gets leaked the person can make any API request on behalf of the app |
Check out gamblingsitefinder.com for a decent list/rankings of crypto casinos. Note: I have no affiliation or interest in it, and don't even agree with all the rankings ... but it's the only uncorrupted review site I'm aware of. |
|
|
sammyfoir
Newbie
Offline
Activity: 20
Merit: 0
|
|
August 01, 2015, 01:28:45 AM |
|
thank u moneypot admin for the support.
my balance are back.
so the problem is the owner of betterbets withdraw the user coin?
wow... that's unbelievable.
|
|
|
|
|
|
Altcoin4life
|
|
August 01, 2015, 03:01:25 AM |
|
thank u moneypot admin for the support.
my balance are back.
so the problem is the owner of betterbets withdraw the user coin?
wow... that's unbelievable.
No betterbets didn't withdraw your coin a hacker did......you read the announcement on their thread??? |
|
|
|
|
Altcoin4life
|
|
August 01, 2015, 03:08:39 AM |
|
does this mean that an app owner a she knows his app_secret could tip away
all his customers coins?
Yes, hence the warnings =) An app owner has full control of the money that is deposited on their app, until it's been pulled back into the moneypot account. We authenticate the app using an app_secret, so if this ever gets leaked the person can make any API request on behalf of the app This is really misleading the btc is never on an app or casino it's just a code stating that player has x amount on that app and when they return their btc to MP it's credited to their account. All money is entered and withdrawn from mp no app or casino ever has physical btc on it... |
|
|
|
RHavar (OP)
Legendary
Offline
Activity: 2557
Merit: 1886
|
|
August 01, 2015, 04:46:18 AM
Last edit: August 01, 2015, 06:30:10 AM by RHavar |
|
Yes, hence the warnings =)
An app owner has full control of the money that is deposited on their app, until it's been pulled back into the moneypot account. We authenticate the app using an app_secret, so if this ever gets leaked the person can make any API request on behalf of the app
This is really misleading the btc is never on an app or casino it's just a code stating that player has x amount on that app and when they return their btc to MP it's credited to their account. All money is entered and withdrawn from mp no app or casino ever has physical btc on it... As my statement was not misleading, I am going to say it again an application has complete control of all money deposited to it until that money is withdrawn from the app, which is why the deposit UI shows that warning in every place a user can fund an app:  MoneyPot does allow you to deposit and withdraw from an app instantly, but when funds are on an app the app can do what ever it wants with it. That's how the app makes bets, and can tip accounts. The fact that the app doesn't have physical bitcoins on it is pretty irrelevant as it can just withdraw the money (as the attacker did today). So please do not try subvert the warnings MoneyPot gives, or misrepresent the relationship. |
Check out gamblingsitefinder.com for a decent list/rankings of crypto casinos. Note: I have no affiliation or interest in it, and don't even agree with all the rankings ... but it's the only uncorrupted review site I'm aware of. |
|
|
ndnh
Legendary
Offline
Activity: 1302
Merit: 1005
New Decentralized Nuclear Hobbit
|
|
August 01, 2015, 08:06:01 AM |
|
Yes, hence the warnings =)
An app owner has full control of the money that is deposited on their app, until it's been pulled back into the moneypot account. We authenticate the app using an app_secret, so if this ever gets leaked the person can make any API request on behalf of the app
This is really misleading the btc is never on an app or casino it's just a code stating that player has x amount on that app and when they return their btc to MP it's credited to their account. All money is entered and withdrawn from mp no app or casino ever has physical btc on it... As my statement was not misleading, I am going to say it again an application has complete control of all money deposited to it until that money is withdrawn from the app, which is why the deposit UI shows that warning in every place a user can fund an app: MoneyPot does allow you to deposit and withdraw from an app instantly, but when funds are on an app the app can do what ever it wants with it. That's how the app makes bets, and can tip accounts. The fact that the app doesn't have physical bitcoins on it is pretty irrelevant as it can just withdraw the money (as the attacker did today). So please do not try subvert the warnings MoneyPot gives, or misrepresent the relationship. Yeah, that is completely right. I read through everything in the Moneypot site, the FAQ and everything. So, when you deposit money to an app, the app has control over it. But the deposits and withdrawals are instant, so the player needs to only deposit the money he needs to play, and withdraw it when he closes the site. Done. Thanks  |
|
|
|
|
|
Altcoin4life
|
|
August 03, 2015, 04:47:47 PM |
|
Yes, hence the warnings =)
An app owner has full control of the money that is deposited on their app, until it's been pulled back into the moneypot account. We authenticate the app using an app_secret, so if this ever gets leaked the person can make any API request on behalf of the app
This is really misleading the btc is never on an app or casino it's just a code stating that player has x amount on that app and when they return their btc to MP it's credited to their account. All money is entered and withdrawn from mp no app or casino ever has physical btc on it... As my statement was not misleading, I am going to say it again an application has complete control of all money deposited to it until that money is withdrawn from the app, which is why the deposit UI shows that warning in every place a user can fund an app: MoneyPot does allow you to deposit and withdraw from an app instantly, but when funds are on an app the app can do what ever it wants with it. That's how the app makes bets, and can tip accounts. The fact that the app doesn't have physical bitcoins on it is pretty irrelevant as it can just withdraw the money (as the attacker did today). So please do not try subvert the warnings MoneyPot gives, or misrepresent the relationship. Yeah, that is completely right. I read through everything in the Moneypot site, the FAQ and everything. So, when you deposit money to an app, the app has control over it. But the deposits and withdrawals are instant, so the player needs to only deposit the money he needs to play, and withdraw it when he closes the site. Done. Thanks Oh i see I misread this the security is comforting thought thank u for clarification. |
|
|
|
RHavar (OP)
Legendary
Offline
Activity: 2557
Merit: 1886
|
|
August 03, 2015, 11:25:14 PM |
|
As announced on slack, we're temporarily running on 0 commissions for app developers. This means devs should be now making x2 as much as normal for the next couple of days.
Also in the coming hour, we'll support setting our own app thumbnail and description. So app devs please checkout the admin panel, and make sure thats set.
|
Check out gamblingsitefinder.com for a decent list/rankings of crypto casinos. Note: I have no affiliation or interest in it, and don't even agree with all the rankings ... but it's the only uncorrupted review site I'm aware of. |
|
|
|
BetterBets.io
|
|
August 03, 2015, 11:45:19 PM |
|
As announced on slack, we're temporarily running on 0 commissions for app developers. This means devs should be now making x2 as much as normal for the next couple of days.
Also in the coming hour, we'll support setting our own app thumbnail and description. So app devs please checkout the admin panel, and make sure thats set.
Excellent news, kudos to the Moneypot team! |
|
|
|
joksim299
Legendary
Offline
Activity: 2184
Merit: 1014
Bitdice is scam scam scammmmmmmmmmmmmmmmmmmmmmmmmm
|
|
August 04, 2015, 12:31:04 AM |
|
As announced on slack, we're temporarily running on 0 commissions for app developers. This means devs should be now making x2 as much as normal for the next couple of days.
Also in the coming hour, we'll support setting our own app thumbnail and description. So app devs please checkout the admin panel, and make sure thats set.
Now we can expect 200 new Untitled Dice script sites  |
|
|
|
|
FrozenOne
|
|
August 04, 2015, 10:01:53 AM
Last edit: August 04, 2015, 11:30:13 AM by FrozenOne |
|
Issue with my deposit again. It has confirmations and not showing up in my balance. Should I just not use old addresses? Is that the issue? I don't see why that would be an issue when I've never had this problem until recently. Bleh. This sucks. I hate waiting when I've already waited. Man.
It's not even that old of an address. I don't think it was ever used! Hmmmmm.
Issue quickly resolved itself. Thanks!
|
|
|
|
|
|
birdcat90
|
|
August 04, 2015, 03:36:51 PM |
|
Thanks Ryan,, moneypot now working perfectly for me..
deposit and withdrawal without any problem, also the speed now back to normal again..i appreciate it
|
|
|
|
RHavar (OP)
Legendary
Offline
Activity: 2557
Merit: 1886
|
|
August 06, 2015, 04:21:17 AM
Last edit: August 06, 2015, 05:26:07 AM by RHavar |
|
Just doing a quick re-organization of the cold wallet to make it more robust in the case of getting hit by a bus. I'll publish a new MP cold address in a couple hours. Edit: Funds are safely at rest. You can view our cold wallet holdings here: https://www.moneypot.com/proof-of-assets.txtwhich should always exceed our liabilities: https://www.moneypot.com/proof-of-liabilities.txt |
Check out gamblingsitefinder.com for a decent list/rankings of crypto casinos. Note: I have no affiliation or interest in it, and don't even agree with all the rankings ... but it's the only uncorrupted review site I'm aware of. |
|
|
|
nikona
|
|
August 06, 2015, 07:53:37 PM |
|
Is it possible to increase the withdrawal fees through the moneypot site ? I just withdrew some funds but went with a fees of 0.00008 BTC with a medium priority.
|
|
|
|
|
RHavar (OP)
Legendary
Offline
Activity: 2557
Merit: 1886
|
|
August 06, 2015, 10:07:35 PM |
|
Is it possible to increase the withdrawal fees through the moneypot site ? I just withdrew some funds but went with a fees of 0.00008 BTC with a medium priority.
It's currently using bitcoin-core 0.11's default dynamic fees, which has a goal to be confirmed within two blocks. Most of the time it works very well, even when block-explorers say otherwise. I've experimented with using the results of estimate-priority 1, however it's quite unstable and often leads to paying x3 as much fees as required. However, what I'd like to give users the option of picking their own priority (high, medium, low) but bitcoin-core currently doesn't offer support for it over rpc very well at the moment. There's no way to adjust the estimatefee target over rpc (issue: https://github.com/bitcoin/bitcoin/issues/5796) and settxfee doesn't work very well either (issue: https://github.com/bitcoin/bitcoin/issues/6479). If no one touches these issues, I'll create a patch for it myself when I get the chance |
Check out gamblingsitefinder.com for a decent list/rankings of crypto casinos. Note: I have no affiliation or interest in it, and don't even agree with all the rankings ... but it's the only uncorrupted review site I'm aware of. |
|
|
|
Aleator
|
|
August 07, 2015, 12:12:10 AM |
|
I believe this project will be the next big thing , look at it , it brings investors/owners/gamblers all together under just one website.
Keep up the good work moneypot team!
|
|
|
|
|
marketingcoin
|
|
August 07, 2015, 12:30:24 PM |
|
One mistake does not open the site gives news dizelirm Waiting give news  |
|
|
|
|
NLNico
Legendary
Offline
Activity: 1876
Merit: 1289
DiceSites.com owner
|
|
August 07, 2015, 01:03:25 PM |
|
I am wondering if there are other people like me who, uhm, don't like "bits" .. at all  Option for "show as BTC" would be cool. Then again, I am currently not an active player nor investor, so no need to change it for me. Just curious if others share that opinion |
|
|
|
|
BitBatFan
|
|
August 07, 2015, 01:17:49 PM |
|
I am wondering if there are other people like me who, uhm, don't like "bits" .. at all Option for "show as BTC" would be cool. Then again, I am currently not an active player nor investor, so no need to change it for me. Just curious if others share that opinion Same here. Better to se pure BTC value, even if its 0.000012 |
|
|
|
|
|
