XAVOA - Online Bitcoin Casino

[XAVOA]

I just launched XAVOA, a simple and fair online casino, playable with Bitcoins.

Coinflip
https://www.xavoa.com/media/images/coinflip_preview.png
Min bet: 1m฿ --- Max bet: 2,500m฿ --- Payout percentage: 99%

More games coming soon.

Stay tuned with this topic and don't miss exclusive promotions
www.xavoa.com

[XAVOA]

Current Promotion:

New Year Bonus
Deposit exactly 13m฿, post your username (or write me a private message) and you'll get a 100m฿ bonus.
Available: 85/100

[dooglus]

Current Promotion:
Open an account, post your username and you'll get a 250 m฿ bonus. No deposit required.
Status: Active (50/50 available)

I tried creating an account 'dooglus' using password 'ytK&ELHCL$FuBr9Qajv0#77p' but it failed, telling me I had to use 'valid characters', even though it hadn't given me any indication of what characters were valid until then.  Apparently I'm not allowed to use &, $, or #.

I tried again, using password 'DP24Sr4aGlqctGquLCMxqgNj', but now when I try to log in, it tells me "Error / Please fill out all fields. / Back".

Is my password too long and that's causing it to fail?

I tried registering again, but the username is no longer available.

I tried all prefixes of my password, thinking that maybe you truncated it before storing it, but not before checking upon login, but that didn't work either, so I had to give up.

[HotDiggityDawg]

I'll give it a try Username: HotDiggityDawg

[XAVOA]

I tried creating an account 'dooglus' using password 'ytK&ELHCL$FuBr9Qajv0#77p' but it failed, telling me I had to use 'valid characters', even though it hadn't given me any indication of what characters were valid until then.  Apparently I'm not allowed to use &, $, or #.

You're right. For security reasons, it's currently not possible to use special characters like &$# in your password. Otherwise you should get the following error message: Please use only valid characters for your password (A-Z a-z 0-9 . - _).

I tried again, using password 'DP24Sr4aGlqctGquLCMxqgNj', but now when I try to log in, it tells me "Error / Please fill out all fields. / Back".

Is my password too long and that's causing it to fail?

I tried registering again, but the username is no longer available.

I tried all prefixes of my password, thinking that maybe you truncated it before storing it, but not before checking upon login, but that didn't work either, so I had to give up.

That's strange. I tried it a minute ago and I was able to login with your username and this password without issue. The password lenght was fine. Please try it again and let me know if it works now.

I'll give it a try Username: HotDiggityDawg

Bonus added, good luck.

[Junko]

Username: Junko

Thanks

[XAVOA]

Username: Junko

Thanks

Bonus added, good luck.

[Junko]

Thanks again. Pretty cool. Looking forward to the animations and other games.

Having a problem logging in. Whenever I try to log in, it brings me to the Open an account page, which I don't fill out because I already have an account obv. But when I try to log in by hitting the Login button in the upper right, I get an error message:



I'm pretty sure I'm using the correct password. Haven't been able to get back in since I first logged out.

Firefox and Google Chrome

Anyone else have this problem?

[XAVOA]

I'm sorry for that, I have fixed it.

[dooglus]

That's strange. I tried it a minute ago and I was able to login with your username and this password without issue. The password lenght was fine. Please try it again and let me know if it works now.

It doesn't.

I put 'dooglus' and the password into the two boxes in the top right:



then click 'login' and get:



This is in chromium.  I tried in firefox and got the same.

[dooglus]

I have an extension "adblock plus" installed in both.  Disabling it in chromium allowed me to log in.  I've not tried disabling it in firefox but I expect it would fix the problem there too.

Edit: I just checked and adblock plus isn't installed in firefox at all so I don't know why I can't log in there.  I had something called "httpfox" installed.  Disabling that changed the message from telling me I needed to fill in all the fields to telling me the password was wrong.  But now chromium tells me the password is wrong too, so I guess you (or someone else who could find the password reset form) changed my password.

[dooglus]

So I can log in now - but I'll need a password reset since I posted my password here!  Could you change it to something and PM it to me please?

[XAVOA]

Done

[dooglus]

Done

Thanks.  Now I can log in with adblock plus enabled too.  Did you fix something your end?

I don't see anything in my previous password (DP24Sr4aGlqctGquLCMxqgNj) that could look at all like an advert...

Edit: never mind.  I see you already said you fixed the bug when Junko posted about it...

Thanks for the 250 chips. 

[gweedo]

ANOTHER ONLINE CASINO SERIOUSLY? PLEASE NO MORE ONLINE CASINOS!

[dooglus]

So I've been able to play, but I'm having trouble figuring things out.

Firstly, I can't tell what's a link and what isn't.  Everything's the same style.  'INFO' and 'PLAY' on the bottom line look identical.  PLAY is a link that plays a game but INFO appears to do nothing.

I played a few times to see if I could figure out how the provably-fair aspect works.  I can't work out how to get from the secret to the hash.  Or from the secret to the shuffle.  It does appear that if the first 3 digit number of the shuffle is low, I win.  Is there a page that describes the rules, and how the shuffle works?

Here are the details of the times I played:

Code:

bet   res hash                                                                  secret                                                  shuffle
1     L   f87ae931ca0288df4b63d6dbc1ee5d02f66e3428aaef610ea17dc1c35003fc40      KDZ22xhIYxjyL6NtFJRZklO2qqzgtteLqXkQZQc6YTaJG51Zf5      150-074-054-136-011-144-145-142-042-112-113-187-134-076-111-143-183-095-127-197-083-155-189-110-123-177-046-016-165-028-029-048-122-166-047-008-190-077-092-062-085-192-156-149-140-130-079-154-117-200-031-005-024-191-159-078-038-148-044-027-056-176-089-181-170-068-138-067-102-069-135-053-167-071-160-120-055-153-132-157-037-101-007-196-188-185-081-010-141-065-015-059-171-199-128-009-013-043-098-045-040-051-019-022-195-121-114-057-021-131-198-012-175-066-086-096-082-161-193-064-070-178-164-036-094-162-182-034-020-080-169-049-109-133-061-126-173-014-099-075-017-033-168-163-073-139-106-118-072-097-119-087-103-116-001-115-023-186-032-151-104-084-091-063-026-158-125-004-050-058-052-152-184-088-179-108-003-002-146-129-107-018-137-093-039-147-060-035-105-030-172-006-124-025-180-100-090-174-194-041
2     L   d4e62704e4bf5a2ac1b308dc264cb642e8113fd3a07561b0088dba20eb01eb99      opGbMM10jdyzokncAkErPzKOG4ga1yWcRbQUWwsrW2wD9zbKUL      133-179-063-159-107-172-058-181-130-050-073-001-072-026-037-190-173-155-147-013-184-069-169-002-144-012-111-031-017-061-104-166-129-134-109-158-146-041-154-027-093-082-035-176-018-137-046-080-091-124-194-040-132-036-029-170-115-005-135-020-097-192-141-008-112-075-191-108-153-116-077-142-078-056-175-039-083-094-157-004-114-178-051-033-150-160-196-070-049-068-140-010-096-090-006-105-182-193-197-079-139-016-057-138-168-162-136-043-113-102-084-167-009-088-180-071-015-121-122-185-023-067-019-048-118-128-025-087-149-106-092-143-003-165-038-085-125-177-064-060-119-164-021-055-103-110-054-030-101-086-042-059-045-032-052-131-099-189-183-151-076-098-074-062-024-186-053-174-195-117-145-199-028-156-127-161-095-187-081-022-198-007-120-126-011-047-034-188-200-171-123-044-100-148-089-065-163-152-014-066
4     W   29b7af86b41bf06c0c994773c87cefa43a9f90916e14546b42db369360ad7ec1      ue9Fb8K3v2ftKhMKZYYtRT9VYy42BNIJWZieLl9kTYYvZbVMAr      037-158-174-176-040-099-168-010-019-092-196-131-034-072-192-035-051-100-193-101-058-140-197-124-125-136-187-164-172-023-029-091-087-134-184-075-004-018-089-173-163-088-026-084-013-159-078-130-054-120-049-038-129-096-009-109-025-119-133-071-123-005-076-190-155-055-103-093-161-047-108-165-102-061-104-178-194-200-122-116-015-152-117-181-030-105-008-083-082-199-126-151-154-081-132-095-070-016-041-080-148-195-045-024-032-094-002-027-033-169-064-077-097-112-146-074-139-062-106-186-086-065-068-001-098-166-182-059-162-053-153-167-006-157-107-069-144-039-052-031-066-147-145-073-191-022-188-189-114-141-056-171-044-057-017-142-043-135-085-111-175-128-180-198-060-138-160-137-067-113-156-021-036-007-150-121-028-118-183-020-115-063-014-079-177-011-003-048-143-050-185-042-149-127-012-046-179-090-110-170
1     W   bfaf541f974c127e0e992403e240ec57aadd5cb7c76239dba08df66b2bc37748      dQOG9KSPR1OCaI9XubXAyhOffyFQSYsSilUcR0l2CKlIrCVs2q      045-050-140-179-001-165-017-130-059-015-109-043-067-149-026-055-101-030-184-175-036-113-097-151-046-136-155-088-148-033-065-187-152-013-092-169-019-014-171-023-095-192-037-062-138-082-009-028-107-181-039-119-086-099-122-076-129-080-123-053-016-031-018-161-052-153-185-127-005-025-021-102-083-163-029-176-040-142-056-194-012-020-137-103-010-172-070-091-044-051-008-093-126-084-159-047-011-178-061-128-174-004-173-166-186-002-105-112-098-096-164-003-168-188-041-068-077-118-074-079-120-069-146-024-160-196-158-139-144-078-170-071-073-115-110-134-121-108-177-125-035-022-042-135-197-183-060-156-032-063-064-200-100-111-106-058-089-180-048-117-072-198-167-189-162-124-145-190-143-157-085-131-057-027-034-132-191-087-038-182-081-006-054-147-150-066-199-007-090-094-104-141-049-114-116-195-133-154-193-075
1     L   3040bf06f3210b61ca708ac0881ad9566156a2a3451d9f866d4de7539afe5a0b      W5GJcBS7UFgjJD4bybIvobclODYaKttJYssupkYzEMqVfnrvJW      194-117-140-186-184-159-166-109-092-081-133-059-023-095-064-149-175-126-040-055-027-195-185-141-189-008-196-042-003-112-198-146-085-169-028-015-167-183-103-097-180-122-022-160-106-035-191-193-154-188-163-047-124-050-066-090-131-135-012-148-063-001-011-013-129-046-021-033-058-132-200-139-062-048-017-187-130-044-018-060-034-004-127-158-084-032-125-020-156-174-143-171-099-161-056-137-061-105-083-157-134-037-104-177-026-071-111-120-016-014-164-118-165-006-102-080-168-073-088-030-101-024-019-128-121-089-078-152-173-108-153-176-070-094-181-123-025-179-087-147-082-096-138-144-142-052-010-053-007-136-110-107-145-093-119-151-192-069-005-116-178-067-075-079-038-182-172-197-051-041-029-002-114-054-098-057-009-039-150-043-155-190-031-091-162-077-045-065-115-036-199-074-170-113-072-068-049-076-100-086
2     L   affe11ab0739fd971e70530193e31fc2f7bf00b99221623a6245525c32a37292      VDyyLM1ECc0IWYjORVdb6paTy2LW1J2tpRYFKMJFGxfiYCSbDW      183-116-182-108-099-077-054-178-185-177-024-048-046-109-097-173-022-200-002-132-023-114-055-037-063-039-134-129-089-049-013-115-127-157-041-138-034-071-030-031-163-061-087-137-040-067-098-078-104-117-144-111-084-085-068-196-045-105-027-001-033-140-053-190-094-175-106-145-158-141-052-120-149-014-147-126-136-003-112-101-142-006-093-171-113-195-139-081-018-160-019-122-102-189-169-042-079-065-062-020-096-168-128-007-133-066-162-135-016-004-092-056-121-038-125-090-167-131-156-174-107-192-187-026-151-165-186-073-179-100-009-080-051-005-197-047-059-118-060-064-058-198-159-025-110-155-146-130-150-164-015-050-043-082-166-086-032-184-069-070-095-199-028-075-193-180-181-083-191-161-143-057-029-124-188-074-119-008-123-076-021-176-088-170-010-036-194-011-017-172-012-103-152-153-072-091-154-035-148-044
4     L   bb5a9c7300e7b974a9fe4018af228f9bd98f892e8fa529b82b9b11af52880cc5      E41c6ZwwIyK5Dx0nST1V53URotGOYxk3MEoCQquNPk9nxCHZce      120-080-101-041-075-039-049-044-069-038-106-076-162-011-085-135-186-191-005-091-073-164-129-089-179-175-118-058-026-016-033-025-156-121-036-029-052-192-045-078-083-199-185-132-064-010-137-077-040-063-103-170-007-131-096-092-017-173-197-143-024-115-195-133-004-145-056-087-099-081-181-140-008-188-183-051-127-057-027-150-098-093-067-032-061-105-002-139-034-094-198-054-065-174-071-097-059-020-055-169-111-178-148-151-018-012-152-153-001-074-146-050-177-142-196-037-134-104-193-088-166-160-030-114-019-110-190-158-108-163-155-082-048-068-113-116-176-066-189-060-107-028-141-130-006-022-003-062-112-009-147-084-053-046-126-070-138-072-144-167-117-154-200-182-184-047-125-079-159-187-086-119-035-100-128-090-157-015-122-021-136-109-023-014-194-013-123-043-168-165-102-095-161-171-031-180-172-042-149-124
8     L   224076403c14d53c4a8edff581fdffa073ddbf500662487c668e791102f1fb68      g3GoIHwMYPJTGPJ2LXfHsarvgKBVEnafsnsKvNlFGcrBaBCVLH      120-180-058-003-188-112-165-115-104-154-149-129-176-145-122-080-075-070-039-181-110-102-038-013-015-073-132-175-178-127-140-131-200-103-123-043-018-045-186-164-116-194-139-014-069-108-128-124-096-057-060-006-098-072-011-056-063-196-166-117-197-009-133-028-055-111-130-040-169-017-151-016-100-195-029-141-061-092-179-191-183-144-030-159-001-125-107-041-135-185-189-152-079-007-106-052-147-168-035-095-118-037-155-094-012-034-192-027-113-010-156-062-190-089-036-076-105-148-182-004-078-050-137-083-025-187-163-114-085-174-064-090-074-046-081-161-162-032-101-198-005-020-066-042-134-099-193-033-153-160-049-184-051-021-138-109-150-171-173-088-067-071-054-167-053-172-121-143-019-008-199-087-068-047-059-084-023-158-031-022-077-002-091-097-024-142-177-026-136-119-126-086-082-048-157-065-170-044-146-093
16    L   e411d2668dda6b6abf388226b449275eee222c31c2a10dfd492000e977195f21      rqFmD6a4OXB6APcvB6TuDi8PVoIt9OC0oqDRyTPnQ5S7wUqrCp      197-191-171-158-063-020-177-082-185-064-049-134-170-097-157-077-008-173-034-129-161-030-119-042-010-195-149-127-135-079-007-039-021-104-106-101-166-043-056-133-065-029-061-184-053-015-088-121-006-009-196-040-026-048-151-059-142-099-155-041-024-150-091-120-060-047-152-096-037-167-187-052-055-192-081-194-156-200-107-103-028-068-022-159-118-115-027-105-087-011-112-035-110-176-078-139-137-095-138-058-100-072-032-143-179-001-004-148-163-038-160-057-111-098-067-045-094-178-102-046-109-147-066-190-031-169-114-084-051-093-108-189-186-117-014-130-070-165-005-013-089-113-080-126-025-085-164-033-054-073-132-018-003-074-175-180-199-182-172-012-083-116-144-050-122-136-193-124-153-188-154-076-069-181-016-086-071-075-090-123-036-019-168-128-002-174-092-023-062-198-146-131-125-140-183-141-145-017-044-162
32    W   8f1bd8a5187e0f9bba1f5505eecf24184814ec6e9195409fbe5aa4a84cf204c7      pKcB6AEuiDSoZfozRlCPOiQgchPAI94KAq4W41U3NMBkmt22O1      064-197-109-113-104-118-042-003-158-071-134-141-050-083-185-091-189-056-078-186-194-125-033-043-168-135-133-031-147-103-081-174-026-096-163-017-124-048-051-108-193-037-101-086-007-038-097-027-130-016-029-169-110-080-150-140-196-156-095-129-165-105-041-181-022-030-020-046-047-010-060-146-183-188-073-137-159-013-011-178-180-094-145-107-142-082-153-184-155-170-006-009-190-055-057-106-045-123-114-149-084-162-001-004-116-112-179-065-198-117-126-195-014-119-088-052-172-151-025-067-173-138-102-098-034-028-176-100-087-074-199-090-012-005-182-068-128-131-015-049-157-018-120-164-127-093-089-024-066-032-152-076-144-111-132-069-171-008-175-044-058-021-122-139-136-161-166-054-192-035-121-191-177-062-200-187-075-023-040-167-072-143-019-154-039-148-059-099-061-085-115-063-002-070-079-160-077-053-036-092

Do I have any control other than typing an amount to bet and clicking 'PLAY'?  Most 'provably fair' games allow the user to specify a seed that's used in addition to the site's seed to decide the outcome.  Without that, all you're doing by providing the hash before I play is deciding beforehand whether I win or lose.  If you don't allow me to influence the result (in a way I can't predetermine, of course), then you could easily be picking losing secrets much more often than winning ones.  Maybe you already have this and I just don't understand your interface.

[dooglus]

So I played a few times, and got my balance up to 253.



I decided to test the withdrawal and deposit functions.

I tried to withdraw 250 - the amount field said mBTC to I assumed I should type 250 not 0.250:



but I'm told I don't have that much:



So I figure perhaps you need the amount in BTC, not mBTC, so go back and type .25 instead:



but it doesn't like that - probably because of the decimal point:



So now I'm stuck.  What do I need to do to be able to withdraw something?

[dooglus]

So now I'm stuck.  What do I need to do to be able to withdraw something?

I tried more times:

250 -> no
100 -> no
3 -> yes
3 again -> yes
100 -> no
50 -> yes
50 again -> yes

So there's something going wrong there.  I can't withdraw 100 mBTC but I CAN withdraw 50 twice straight off.

Edit: after further experimentation, I can withdraw 74 mBTC but not 75 mBTC.  And furthermore I can withdraw those 74 mBTC over and over again.  It doesn't seem to reduce my balance.

I ran up against the max number of withdrawals I can make today, but managed to withdraw more than my 253 mBTC balance:



and then checking my balance in the game, I see I still have 253 mBTC:



Edit2: of course, you can have the coins back.  Just give me an address to send them to.  Or I can send them to my deposit address and you can adjust my balance accordingly.

Edit3: I repaid all the withdrawals to my deposit address.  Revisiting the deposit page shows a new deposit address for me now, so I can tell you've received it.  But the deposit page shows no other indication that the payment was received.  I'd expect to at least see it showing up as "pending, awaiting confirmations" or some such.  Currently my deposit has one confirmation.

I sent 0.542 BTC.

Code:

>>> 0.003 + 0.003 + 0.074 + 0.074 + 0.074 + 0.073 + 0.071 + 0.07 + 0.05 + 0.05
0.542

Edit4: The site seems to be offline now.  I get a server error message.



Here's my wallet after receiving the 10 withdrawals and paying them back to you:

[XAVOA]

Dooglus, thank you very much for this detailed error report.
This bug has been fixed now (the same kind as the first one) and you have got an additional 2000 m฿ bonus for your honesty.

I'm going to make the INFO button clickable, which will display more information about the game.

Short:
001 - 099 = Heads (49%)
100 - 198 = Tails (49%)
199 - 200 = Edge (1%)

shuffle:secret = hash (SHA256)

e.g.

Code:

150-074-054-136-011-144-145-142-042-112-113-187-134-076-111-143-183-095-127-197-083-155-189-110-123-177-046-016-165-028-029-048-122-166-047-008-190-077-092-062-085-192-156-149-140-130-079-154-117-200-031-005-024-191-159-078-038-148-044-027-056-176-089-181-170-068-138-067-102-069-135-053-167-071-160-120-055-153-132-157-037-101-007-196-188-185-081-010-141-065-015-059-171-199-128-009-013-043-098-045-040-051-019-022-195-121-114-057-021-131-198-012-175-066-086-096-082-161-193-064-070-178-164-036-094-162-182-034-020-080-169-049-109-133-061-126-173-014-099-075-017-033-168-163-073-139-106-118-072-097-119-087-103-116-001-115-023-186-032-151-104-084-091-063-026-158-125-004-050-058-052-152-184-088-179-108-003-002-146-129-107-018-137-093-039-147-060-035-105-030-172-006-124-025-180-100-090-174-194-041

+

Code:

:

+

Code:

KDZ22xhIYxjyL6NtFJRZklO2qqzgtteLqXkQZQc6YTaJG51Zf5

=

Code:

f87ae931ca0288df4b63d6dbc1ee5d02f66e3428aaef610ea17dc1c35003fc40

Please note that you have the choice between heads and tails, so there isn't a way to cheat.

[dooglus]

Dooglus, thank you very much for this detailed error report.
This bug has been fixed now (the same kind as the first one) and you have got an additional 2000 m฿ bonus for your honesty.

Thanks!

I'm going to make the INFO button clickable, which will display more information about the game.

Do you plan to make the clickable items visually different than the rest of the content?  Currently it's hard to know what to do.  Maybe make the clickable things look more traditionally like a button?

shuffle:secret = hash (SHA256)

OK, I get it now, thanks.  You have shuffled and decided how the coin is going to land before I even decide how much to bet, and that's what you're proving to me; that you didn't change your mind when you what side I picked.  There's no proof that you decided how the coin would land in any fair way, just that you didn't change the result based on my choice and/or stake.

Please note that you have the choice between heads and tails, so there isn't a way to cheat.

I hadn't noticed that I could chose.  But even now I know that, you could still be arranging things so that 5% of all tosses land on the "edge" so I'm bound to lose.  It's possible to get around that possibility, and prove to your users that you aren't cheating.  See https://techblog.bitzino.com/2012-06-30-provably-fair-shuffling-through-cryptography.html for how bitZino does it by having both the casino and the user provide part of the seed used to shuffle.