🌟🎲🌟 MoneyPot.com

[Dogedigital]

Doge, are you sure that was all?!?

I am a passive investor in the house 'pot' and tally returns each night. Today I noticed something curious. Over the last 24 hrs 'investor profits' have risen about 4% (237.5-mil bits to 246.9-mil bits) but my invested funds have only risen about 1.1%. Generally I've found that these numbers should track pretty closely. Am I missing something or has there been some disconnect. By my understanding if 'investor profits' rise x% then a return on my largely static investment should closely mirror that.

Yes, that is all that occurred database wise.

The bankroll is at over 850 BTC, meaning if the bankroll profited 10 BTC (246.9 - 237.5), that would lead to each person's share of the bankroll increasing around 1.1% (10/850).

Ah, my mistake. Hope I didn't sound accusatory, was just tired and confused, lol. Anyway, love the platform. My biggest concern is security ... I really like the security features that Bitmex implements (see below). Hoping you guys got it locked down tight because I'm shoveling my btc into your investor pool. *You have an opportunity to differentiate yourself around security, but haven't seen it yet. Hoping you guys keep this front and center, even more important than growing the site.

This from a recent Bitmex e-mail:

"This weekend, Gatecoin was hacked. It appears losses may be as much as US$2M. The CEO, Aurelien Menant, is a friend of mine and a great entrepreneur. I am certain they are doing everything possible to recover the funds and get the exchange back online again quickly.

The security of user funds is our #1 priority. In light of this hack, I want to reiterate the security policies of BitMEX:
 
No Hot Wallet

The most common attack vector for Bitcoin exchanges is via their hot wallets. A hot wallet is a digital currency wallet where an internet exposed server has access to the private keys. A hot wallet allows users to withdraw their Bitcoin at any time without human intervention from the exchange.

BitMEX stores all customer funds using multi-signature wallets. No private keys are held on any internet exposed computer. 2 of 3 partners must manually sign each withdrawal from BitMEX. If someone hacked BitMEX.com, they would not be able to steal any customer funds.

Many exchanges do hot/cold hybrid stores, where there are withdrawal limits per-user and per-day on the hot, and it must be manually filled via the colds. This can be a good strategy, but it significantly increases complexity - the enemy of security. It appears Gatecoin had a hybrid approach, but the hackers were able to redirect deposits to the hot wallet.
 
Withdrawals Once Daily

Because all withdrawals must be processed manually by 2 of 3 partners, withdrawals are only processed once daily at 13:00 UTC. This allows us to manually review each withdrawal. In some cases where the user behavior is out of the ordinary, we personally contact a user to re-confirm their withdrawal.
 
Real-Time Auditing

BitMEX monitors the internal record and the blockchain balance of every account. We use many disparate blockchain datasources. If a conflict occurs, trading is suspended and the partners are notified.

BitMEX's trading engine sums all accounts to zero at every tick. This would normally be a very time-consuming process, but the superior financial technology used at BitMEX allows us to quickly validate every single execution as a part of the system as a whole. Even a satoshi's rounding error will cause trading to halt.

We take security very seriously. The policies above are among the most stringent at any exchange. In fact, BitMEX was the first exchange to run 100% multisignature wallets and 100% offline wallets. Despite some pressure for faster withdrawals, we have not compromised. We have found that users enjoy the peace of mind, despite the slight inconvenience."

We take security of the funds very seriously.

The vast majority of funds are held in cold wallet storage with 2/3 multi-sig.  We own the private keys.

We monitor the hot wallet closely to try and maintain a good balance between convenience and security.

[1714754551]

1714754551

[JackpotRacer]

will you update this app list you published?

https://bitcointalk.org/index.php?topic=1366689.msg14051966#msg14051966

I saw now a different list under > All Apps <

[wormat22]

A question about the Rubie integration. Will we receive credit for our staked rubies if we chose to deposit/invest with them?

[cazkooo]

will you update this app list you published?

https://bitcointalk.org/index.php?topic=1366689.msg14051966#msg14051966

I saw now a different list under > All Apps <

That was an old post before the new feature and Does it really matter anyway? I dont really think it is necessary to do so because the post  for the apps list is in 6th page and no one is really going to find that post up in the 6th page. People can just go to the site directly and check the all apps tab imo

[hua_hui]

Very happy with the current owners of moneypot.  Hope to see you guys down the road (IK I'm a tad bit late on the congratulations )

I am too happy about the current owners. I was a bit scare previously when it was announced that the ownership will be transferred but i am fine now.

[JackpotRacer]

will you update this app list you published?

https://bitcointalk.org/index.php?topic=1366689.msg14051966#msg14051966

I saw now a different list under > All Apps <

That was an old post before the new feature and Does it really matter anyway? I dont really think it is necessary to do so because the post  for the apps list is in 6th page and no one is really going to find that post up in the 6th page. People can just go to the site directly and check the all apps tab imo

always glad to get your feedback

yes it really matters to show an official list of all MP apps. it should matter for players, app owners and especially for investors. in case that someone is not interested in the list (i.e. you) he can easily ignore it.

[Helix61be]

Very happy with the current owners of moneypot.  Hope to see you guys down the road (IK I'm a tad bit late on the congratulations )

I am too happy about the current owners. I was a bit scare previously when it was announced that the ownership will be transferred but i am fine now.

Same here, i checked the thread out here and everything seemed great with good support so i went for it.
Obviously a good choice, keep up the good work.

[Trade_BTC]

A question about the Rubie integration. Will we receive credit for our staked rubies if we chose to deposit/invest with them?

Good question Rubies investment would be very good as many of us use both.

[joksim299]

Why? Whats the problem with 'minesweeper' apps?
If there is security issue disable them manually

[Dexon]

Why? Whats the problem with 'minesweeper' apps?
If there is security issue disable them manually

A xss injection inssue on the chat. I fixed it right away. When Cooldadd told me about it. I'm not responsible for other casinos that copied my code and didn't paid more attention than I did :p

No one got really affected on Sweepabit. (Besides me for tests) But on some others like Bitmine, everyone most likely lost all their bits. The user named Hax0r said he was going the refund but haven't heard more about it.

P.S.: I kind of feel like, as a chat server, socketpot should've escaped the html chars from the messages.

[stingleword]

P.S.: I kind of feel like, as a chat server, socketpot should've escaped the html chars from the messages.

I never used socketpot - no need. However, this statement deserves seconding. It's a flippin' chat server, it should sanitize!

[MillionsBTCdev]

Previous setup of socketpot allows "freedom of speech" and parses chat messages as "string". So whatever a user types in, it returns that message exactly as it is. So meaning, people can share code snippets on chat without compromising our servers or other apps. It up to app owners to parse this messages.

As for the recent issue, this only affects apps that uses the specific open-source script that dexon made.

As we all know, moneypot does not and can not control the app's codes. So please refrain from using open-source codes without validating the code's integrity and authenticity.

For now, all chat messages that has malicious codes that comes in and comes out of socketpot are escaped. Chat messages with symbols like < will now show as &lt. Its up to app owners to parse this.

It is true that socketpot is not a mandatory to have, you can have your own chat server if you want to. Tho there are advantages on using socketpot as well, like mp-wide system announcement.

I will again ask this to everyone that plans on opening an app on Moneypot. PLEASE refrain from using open-source scripts/codes without verifying the code's integrity and authencity. Moneypot can not control how apps are coded. And for players, PLEASE treat your access_tokens as if it is your password. Never give it to anyone.

Plans on binding the access_tokens to each user's ip is in the works. Meaning if ever your access_token is used by a different ip, this will automatically expire that token and logout the user.

Thanks
-uni

[JackpotRacer]

It is true that socketpot is not a mandatory to have, you can have your own chat server if you want to. Tho there are advantages on using socketpot as well, like mp-wide system announcement.


Thanks
-uni

hi uni

thanks for the explanation. but as we know that exo has their own chat server and still get  mp-wide system announcements that means there is no advantage to have socketpot chat

but again in our opinion if you guys implement the universal chat and the  mp-wide system announcements it would be nice if all MP apps would use it and all will have the profit. but if this is not the case it does not sound fair for all

it would be like the NSA would watch socketpot apps only and not the chat servers of other
MP apps

you guys know that we like to see that all apps will have the same conditions

cheers

[MillionsBTCdev]

Bit-exo uses their own chat server + socketpot. Again socketpot is not mandatory. So what bit-exo did was to use their own chat server and then listens to socketpot for any System Announcement and then pipe this message to their chat room.

All of this is app owner's own choice. For now, we do not force app owners to use socketpot and they are free to use or develop their own chat server. Having said that, we do not and can not control how app's are made and coded.

I have suggested internally to tighten the requirements of verifying app domains and to have a written guidelines on how an app is made. But then again even with this, I myself can not monitor and/or control all moneypot apps.

Thanks
-uni

[Dexon]

The main problem is that i'm using a .innerHtml to add the messages to the chat. I need to switch it to .innerText

[shulio]

I have suggested internally to tighten the requirements of verifying app domains and to have a written guidelines on how an app is made. But then again even with this, I myself can not monitor and/or control all moneypot apps.

Thanks
-uni

Sorry but I seem to be missing some good point here, are you part of the new MP team? I dont recall seeing you on the team before and you do speak as on behalf of the moneypot's team. If you are then it will be great addition, you are a great coder as well as quite a legend gambler around here

[moneypot]

I have suggested internally to tighten the requirements of verifying app domains and to have a written guidelines on how an app is made. But then again even with this, I myself can not monitor and/or control all moneypot apps.

Thanks
-uni

Sorry but I seem to be missing some good point here, are you part of the new MP team? I dont recall seeing you on the team before and you do speak as on behalf of the moneypot's team. If you are then it will be great addition, you are a great coder as well as quite a legend gambler around here

Uni is indeed on our team, he is our lead developer.

[MillionsBTCdev]

I have suggested internally to tighten the requirements of verifying app domains and to have a written guidelines on how an app is made. But then again even with this, I myself can not monitor and/or control all moneypot apps.

Thanks
-uni

Sorry but I seem to be missing some good point here, are you part of the new MP team? I dont recall seeing you on the team before and you do speak as on behalf of the moneypot's team. If you are then it will be great addition, you are a great coder as well as quite a legend gambler around here

Hi, sorry if i did not introduce my self, as i rarely reply or talk on posts that does not concerns me. hehe

So anyway as dogedigital said, im responsible for all technical stuff of mp since last March. So Im responsibile for all downtimes, updates, upgrades, bet speeds etc since then. 

[Chemistry1988]

I am able to log in my MP account, but I am unable to log in any MP apps then. I have tried on BB, Sharpdice and Bit-exo so the problem is likely to be on MP side rather than on the app side. Please take a look at the problem. Thanks.

[stingleword]

I am able to log in my MP account, but I am unable to log in any MP apps then. I have tried on BB, Sharpdice and Bit-exo so the problem is likely to be on MP side rather than on the app side. Please take a look at the problem. Thanks.

I'm able to log in to MoneyPot and LuckyBit Micro but attempting to claim the faucet is returning

403 INVALID_ACCESS_TOKEN

I was able to transfer funds from my MoneyPot balance to my app balance and place a wager successfully, and withdraw the remainder back to MoneyPot.