PRIMEDICE COMPROMISED [RESOLVED]

[Lexiatel]

Wow... I don't use Primedice, so I can't say much, but there have been many trusted sites that have turned dirty. Now this could have been a fluke, things happen and can hiccup, but I wouldn't say that sites  (trusted or not) aren't capable of scamming off a user here and there-- who's gonna believe them?

But users can also make up things to give people bad names too. I have seen that happen before.

From what I read, there looks to be three users who have said this has happened to them. This is in a short amount of time of the topic being posted; this can be both fishy or peculiar.

1) How many other people have been cheated by this site and haven't seen this thread yet or

2) Three users grouped together to accuse this.

As you've stated, there's no proof of what happened, and no script was allegedly used. It's really weird, and since I don't know PD nor the users involved, I can't fairly choose a side.

I do hope that if it's a legitimate problem that it could be fixed. Good luck... Just don't blindly trust anyone, cause in the end, you don't know them, and anyone is capable of fooling you.

I also don't like it when a site advertises that it's trusted. It shouldn't need to do that if it really is trusted. How many people in real life do you trust who actually say that? I know I don't.

Lastly, the most important rule: don't deposit/gamble/give what you can't afford to lose.

[convertekk]

I haven't used any wireless mouse or keyboard. It's my personal laptop and I haven't connected any external device. If Stunna hasn't taken my money, atleast he should try to find out where it went. It's been almost 2 days and no response from Stunna yet. He asked me to mail him directly but no response whatsoever. That's the commitment he shows towards his users !! So much for a "Most trusted community" I suppose.

[convertekk]

48 hours gone and still no reply form Stunna.

[convertekk]

Last Active Today on BCT but he wouldn't reply. WTF!!

[Oilacris]

Someone recently lose his Bitcoin too but not in primedice but in rollin.io he was using seuntjie bot then suddenly all his bitcoin was withdrawn to an unknown address. this is the link where he opened that topic. https://bitcointalk.org/index.php?topic=307425.1780

My guess is malware since both the person just created an account in the dice site and passwords are both unique. Or try to check your emails they might have an access to your email because sometimes in bitcoin world we only use 1 email address.

I think Seuntjie bot site was compromised today and i hope it is recovered now.
To the OP prime dice is not compromised but you might have used an infected script .Sorry to hear about your loss.

This is very possible, if the bots were compromised our fund is in danger, I perfer playing by myself, not the bot.

If PD denied the said lost funds then this thing would be possible on which OP might tried those scripts on which it steals account balance on PD because i cant think of such other thing other than having a malware on the pc but if theres none then the closest possible is the script.imho

[convertekk]

No scripts used whatsoever. I'm sure Stunna can investigate that as well. For using a script, I should have used the API key I suppose. I'm new to these dice games and its been all manual till now.

[AstralWonder]

No scripts used whatsoever. I'm sure Stunna can investigate that as well. For using a script, I should have used the API key I suppose. I'm new to these dice games and its been all manual till now.

How much did you lose? If it's a rather low amount I wouldn't believe Stunna would take it. He has way better ways of being dishonest if he wants to be.

[convertekk]

No scripts used whatsoever. I'm sure Stunna can investigate that as well. For using a script, I should have used the API key I suppose. I'm new to these dice games and its been all manual till now.

How much did you lose? If it's a rather low amount I wouldn't believe Stunna would take it. He has way better ways of being dishonest if he wants to be.

I'm not saying Stunna took it. I'm sure he wont rob me off 50$ with his reputation at stake. All I'm asking for is an investigation of a potential loophole. I just need answers to where and how my money went. I could very well afford to ignore my loss but it's not just me. It has happened to a lot of guys before and it could happen to a lot of them after this.

It's their casual and irresponsible behavior towards user's loss that annoys me the most.

[rfisher1968]

Do your self a favor and never play at primedice. This happened to me a while back and nothing was ever done about it.

https://bitcointalk.org/index.php?topic=208986.msg13660593#msg13660593

[convertekk]

Do your self a favor and never play at primedice. This happened to me a while back and nothing was ever done about it.

https://bitcointalk.org/index.php?topic=208986.msg13660593#msg13660593

Why should we let them off the hook for repetitive mistakes ? If we let go, tomorrow it's another user and another.

People mentioning a lot of ways my machine could have been compromised by malware. It it was a keylogger, that means PD is vulnerable to css attacks. Aren't they responsible for fixing themselves ?

Someone mentioned about leakedsource.com, the passwords there are useless unless you have the salt that they used to create the hash.

Someone mentioned that if you have a wireless mouse or keyboard, you are vulnerable. That's the lamest thing that I've ever heard. No offense but that's lame.

Someone talks about using scripts. I'd try to avoid that here because I myself never used any scripts and can't say if they are compromised.

Someone talks about using 2FA. 2FA gives extra protection to the account but its a huge overhead and you'd expect the site to be safe even without enabling 2FA. Otherwise stop calling yourself as trusted and safe.

I could go on and on. If a user's account is compromised on the site time and again, you should step up and take responsibility than giving out lame replies like what Mladen did in my case. He gave the exact same response for a bug that I've pointed out on their website a couple of weeks ago. Sounded like he copy pastes text to reply to users.

Stunna was quick enough to ask me to email to him directly but no response till now. My bet is he probably wants this cool down itself. But he couldn't be more wrong. I'm taking this as my responsibility to make sure no more new users get robbed like this. After all, they spoiled my new year celebrations by letting a scammer rob my coins!

[Juggy777]

It's really sad to see this happening with you and I can understand the pain of loosing btc, but I don't think primedice would be compromised. Let's give you benefit of doubt you are legit, what I would suggest is keep trying contact the admin and there's a official thread here of primedice post this there also. Contact the Op there also, they normally respond. And primedice is heavily understaffed, they have often said it, if your claim is legit keep contacting them, normally for their faults they do include a small bonus, hope you get both your money and bonus. Just keep patience.

[Joel_Jantsen]

Why should we let them off the hook for repetitive mistakes ? If we let go, tomorrow it's another user and another.

I still insist,wait for Stunnah's sugar coated reply.

People mentioning a lot of ways my machine could have been compromised by malware. It it was a keylogger, that means PD is vulnerable to css attacks. Aren't they responsible for fixing themselves ?

Keylogger is installed in your machine dude and not on the website.However,I doubt that is the case if many players are hacked at the same time.

Someone mentioned that if you have a wireless mouse or keyboard, you are vulnerable. That's the lamest thing that I've ever heard. No offense but that's lame.

Lmao.Me too.Ignore the shit posters,their knowledge is beyond time and infinity.

[convertekk]

If it was keylogger, trust me, we would be hearing this from a lot of users from a lot of other websites. I myself play on more than 5 dice sites. I should have been robbed there too.

[convertekk]

I've emailed Stunna again now asking for an update.

[convertekk]

Still no update from Stunna. Should I move this to the Scam Accusations thread in that case ?

[maku]

Still no update from Stunna. Should I move this to the Scam Accusations thread in that case ?

Wait for it. I don't think that Stunna will gonna sweep this case under the rug. After couple days without proper response just create another thread is Scam Accusation section.
I would keep this thread in gambling section just for people who (like me) are not checking frequently other sections.

[convertekk]

Email me directly, stunna@primedice.com

Mailing you daily. Still awaiting a reply.

[klf]

Still no update from Stunna. Should I move this to the Scam Accusations thread in that case ?

Wait for it. I don't think that Stunna will gonna sweep this case under the rug. After couple days without proper response just create another thread is Scam Accusation section.
I would keep this thread in gambling section just for people who (like me) are not checking frequently other sections.

I saw Stunna asked him mail on 1st Jan and today already 4th Jan. I consider it is already sufficient time given to reply at least first information on what has happened and still how long they need it to investigate. If no reply yet means it is not a good customer support from a reputed site. If they can't manage traffic then should employee someone to handle these issues. It is just my opinion.

[Dank Frank]

Just send stunna a pm, https://bitcointalk.org/index.php?action=profile;u=81292 since he has been online here.

[kolloh]

Still no update from Stunna. Should I move this to the Scam Accusations thread in that case ?

Wait for it. I don't think that Stunna will gonna sweep this case under the rug. After couple days without proper response just create another thread is Scam Accusation section.
I would keep this thread in gambling section just for people who (like me) are not checking frequently other sections.

I saw Stunna asked him mail on 1st Jan and today already 4th Jan. I consider it is already sufficient time given to reply at least first information on what has happened and still how long they need it to investigate. If no reply yet means it is not a good customer support from a reputed site. If they can't manage traffic then should employee someone to handle these issues. It is just my opinion.

Perhaps, they should look into adding additional information to the transaction log such as including the IP address that initiated a withdrawl. Although, even if you know the attacker's IP address, you won't necessarily know how they were able to access your account. Although, it would help to know if the withdrawl came from your own IP or an attacker's IP address as it could help rule out attacks such as CSRF, etc.