★★★ BitBox - Run your own BITCOIN GAMBLING SITE ★★★

[jhenfelipe]

Hi,

Quick explanation. We had a bug report today (first time in 3 years) on crash game. It will be fixed within few hours.

Bitcoins from your bankroll can't be stolen because we use hot & cold wallet + all withdrawals have to be approved. The user which had a 10BTC win started with 0.00001BTC and was intentinaly exploiting the site and of course that client is not obligated to payout that.

We have exactly that.

2 systems. Automatic till a certain level (which can be enabled/disabled) and a manual one.

Yes, we can detect cheating attempts and they are blocked instantly.

How did you know that he is intentionally exploiting the site? I'm curious if do you have a proof or you're just saying that. If your platform can detect cheating attempt why that user who played and won 10btc did not get blocked in the first place?  

[1715209070]

1715209070

[1715209070]

1715209070

[LuanX3]

Hi,

Quick explanation. We had a bug report today (first time in 3 years) on crash game. It will be fixed within few hours.

Bitcoins from your bankroll can't be stolen because we use hot & cold wallet + all withdrawals have to be approved. The user which had a 10BTC win started with 0.00001BTC and was intentinaly exploiting the site and of course that client is not obligated to payout that.

We have exactly that.

2 systems. Automatic till a certain level (which can be enabled/disabled) and a manual one.

Yes, we can detect cheating attempts and they are blocked instantly.

How did you know that he is intentionally exploiting the site? I'm curious if do you have a proof or you're just saying that. If your platform can detect cheating attempt why that user who played and won 10btc did not get blocked in the first place?  

Exactly, that is why there are questions about this platform's security. Like what you have pointed out, there were cheating attempts which could have succeeded if not for manual withdrawals. How about if the guy just went on to withdraw small amounts within the automated withdrawal system? Then for sure the system would not be able to tell that the guy was cheating if he only withdraw small amounts.

[Henkkaa]

I agree, quite worrysome that your system had such a big flaw that allowed the player exploit the system. Weren't all your games properly tested to fix all bugs and remove all possible exploits? I hope you can prove that he cheated to win, because it might tear down the reputation of the casino it happened on, as people could remember it as the "casino that didn't pay out 10btc withdrawal".

Even that this is worrysome, I think your site is a great place to start running a casino from. That being said, this might bring more scam casinos, as the site looks professional and they can reuse the design.

[freemanjackal]

what waranties do you offer, what if a buyer lose all or most of his bankroll due to a programming error or site is hacked? what do you do in such scenarios?

[bitcoinplay_xyz]

This has never happened. We did not have anyone ever hack or exploit anything. We had a lot of attempts so far, but our rules are if the server is hosted with us (standard or premium license) we would refund all damages to the client. If a client has a basic license (which means he is hosting it on his server) it's not insured.

What we have learned in this business is that there are a lot of bad people who are not interested in gambling at all, they just search for casinos and try to break in, we try to detect that as soon as possible and prevent any attempts. It's normal with any software or online platform. There are always good people and bad people.

[jhenfelipe]

What if the user didn't really exploit the site? You've just mentioned that Crash game was just added recently and people don't play it that much (quoted message below). Isn't it possible that you missed to know/checked all of the bugs because you're thinking that only few are playing Crash?

Crash game has been added 2 months ago, to be honest, people don't play crash that much, 90% of players play dice. We have manual withdrawals, yes.

Anyway, I hope you could fixed the problem as soon as possible. Also, if there's no proof that the person exploit the site, you or the owner of bitcoingamesclub should pay him the won amount.

[panjul07]

It seems that this software is made by BitBox scammers and their unique intention was to steal the money from people who trust them and buy this "platform"
Our website is offline now (it is hosted on their servers) and we lost our money.
The BitBox "team" does not reply to emails, PM, Skype.

We lost our money and our reputation is ruined now!

Would you mind to give a comment for this accusation against your software? Is it true that you did not reply to their emails, PM etc? You are online today so it would be great if you reply to this issue, otherwise it may affect your project.

[Henkkaa]

It seems that this software is made by BitBox scammers and their unique intention was to steal the money from people who trust them and buy this "platform"
Our website is offline now (it is hosted on their servers) and we lost our money.
The BitBox "team" does not reply to emails, PM, Skype.

We lost our money and our reputation is ruined now!

Would you mind to give a comment for this accusation against your software? Is it true that you did not reply to their emails, PM etc? You are online today so it would be great if you reply to this issue, otherwise it may affect your project.

It has already affected their reputation. I was seriously considering buying their software, as it looks very good and is reasonable priced. This is a very serious problem if there is a exploit in one of the games, and bitbox support isn't answering. Crash is one of my favourite games, and is sad if it's broken.

If this gets resolved, I'm probably going to purchase your games.

[Cherylstar86]

It seems that this software is made by BitBox scammers and their unique intention was to steal the money from people who trust them and buy this "platform"
Our website is offline now (it is hosted on their servers) and we lost our money.
The BitBox "team" does not reply to emails, PM, Skype.

We lost our money and our reputation is ruined now!

Would you mind to give a comment for this accusation against your software? Is it true that you did not reply to their emails, PM etc? You are online today so it would be great if you reply to this issue, otherwise it may affect your project.

It has already affected their reputation. I was seriously considering buying their software, as it looks very good and is reasonable priced. This is a very serious problem if there is a exploit in one of the games, and bitbox support isn't answering. Crash is one of my favourite games, and is sad if it's broken.

If this gets resolved, I'm probably going to purchase your games.

Well it was also a good game to play and I think those hackers who attack this game was paid by the rival site just to destroy that nice sitr game. It really disappointed everybody who gave full trust to this site and bitbox support should be answering this concerns so that they will regain good reputation which was broke by attackers paid by different gambling software makers. That should be fixed in sooner time so that crash game will be operational again and brings good profit to those affected players.

[MillionsBTCdev]

Just my opinion upon checking the demos..

Below are my main concerns.

Provably Fairness:

On Dice game, the Server Hash is not shown anywhere to the players before spinning. Therefor the server can easily manipulate the outcome based on the 'client seed'.

For Crash game, the Server Hash can easily be manipulated by the server since the 'client seed' is already known and static for each round, the server can be coded to produce more 0 rounds. The server seed hash are also not related or 'chained' to each other. You could check how bustabit did theirs https://bitcointalk.org/index.php?topic=922898.0

For Roulette, pretty much similar to Crash game, the server hashes are in no way 'chained', the client seed is generated by the server. So server can easily manipulate each round to produce lesser or more of each color.

There is little to no explanation either in regards to provably fairness of the games.

Exploits:

There are TWO big exploits i've found on both Crash game and Roulette game. And this exploit can clean anyone's bank since i will be able to know what will be the outcome of the current game, therefor i can bet accordingly and win.

Security:

All user info are stored in the user's browser as cookies. Even the password in 'plain text'. Anyone can be tricked to run a script to steal those information.

2FA Secrets are automatically generated for each user and is static. There is no way for the players to change this secret in case they feel like doing so.

Conclusion/Opinion:

The idea of you guys offering ready made casino/gambling package is a cool idea instead of selling them 1 by 1. But considering the things above, the games/package is in no way ready for production yet. This is just my opinion and consider it as a free advice.

Cheers!
-Uni

[casino]

They found the solution to all problems: THEY TAKE OUR MONEY AND THEY GONE ANWAY!
My website (www.bitcoingamesclub.com) which was hosted on their servers is offline now.
No answer in the last 10 days:  email, PM, Skype!
They are scammers!

[game-protect]

They found the solution to all problems: THEY TAKE OUR MONEY AND THEY GONE ANWAY!
My website (www.bitcoingamesclub.com) which was hosted on their servers is offline now.
No answer in the last 10 days:  email, PM, Skype!
They are scammers!

How much did you lose?

If anonymous people rent a casino software, there is always the risk of a scam. Can you also buy their software?

[RHavar]

If anonymous people rent a casino software, there is always the risk of a scam. Can you also buy their software?

From the auction thread, it definitely seems like they've scammed a few people. But, i'm not sure they're anonymous. The company name they listed on their website is a German one. It appears to be a valid company, registered to (what appears) a residential address in Munich. In one of their posts they did say they have an "office" in Munich, so that part checks out.

However, before any cyber-warrior goes on a witch hunt -- be very careful as it's very possible or even likely they just hijacked someone else company name who has no affiliation with these actual scammers.

[game-protect]

If anonymous people rent a casino software, there is always the risk of a scam. Can you also buy their software?

From the auction thread, it definitely seems like they've scammed a few people. But, i'm not sure they're anonymous. The company name they listed on their website is a German one. It appears to be a valid company, registered to (what appears) a residential address in Munich. In one of their posts they did say they have an "office" in Munich, so that part checks out.

However, before any cyber-warrior goes on a witch hunt -- be very careful as it's very possible or even likely they just hijacked someone else company name who has no affiliation with these actual scammers.

Do you have a link to their auction thread?

Their website link https://bitbox.site/ do not state any company and I would be very surprised if a registered company is behind BitBox.

[RHavar]

Their website link https://bitbox.site/ do not state any company and I would be very surprised if a registered company is behind BitBox.

Yeah it does, it's in the footer...

[joksim299]

Their website link https://bitbox.site/ do not state any company and I would be very surprised if a registered company is behind BitBox.

Yeah it does, it's in the footer...

Domain of their contact email is contact@itbox.com.hr and they have address located in Zagreb,Croatia with phone number listed and company name.
However search at business directory [Transparento.hr] didn't find their business on that address.

[game-protect]

Their website link https://bitbox.site/ do not state any company and I would be very surprised if a registered company is behind BitBox.

Yeah it does, it's in the footer...

You mean ©2016 IT-BOX UG? Yeah, I saw this, but this means nothing.

If they would be a registered company, then they would have terms and conditions and would state the operator in the ToS.

Also German law requires to state an impressum with some info and I think you have also to state the tax number.

When I google for IT-BOX UG, there is no entry with the company.

The website is anonymous, they accept only Bitcoins. Pretty sure this is a scam, considering all the info available!

[RHavar]

Domain of their contact email is contact@itbox.com.hr and they have address located in Zagreb,Croatia with phone number listed and company name.
However search at business directory [Transparento.hr] didn't find their business on that address.

IT-BOX UG is a valid registered Germany company though. I suspect they moved from Croatia to Germany. If you go to their contact page: http://itbox.com.hr/contact.html  they list an address in Munich, but it's different than the company address. (The company address is probably the accurate one, as the one on the webpage is in an prime commercial spot where I doubt they are).

Anyway, I'll stop posting here. I don't want to start a witch hunt.

[game-protect]

O.k., just let me elaborate this:

1) Payment methods

Here in their thread, they state the payment methods Bank, Visa and MasterCard. But if you go to their website, you can only pay with Bitcoins!

2) Pricing

a) Only $400 one time price! Wow, that is really cheap! (backdoor inclusive)

b) Hosting of a gambling casino for only $8 per months! Again, wow.

c) Unlimited 24/7 Customer Service for only $100! Wow, wow.

[Slark]

I am not surprised by the pricing of their services. I have seen companies asking for much more money for offering much less.
It is called 'find a sucker' strategy and it is not a scam per se. What is more important are details of their offer.
They mentioned Visa, PayPal, Bank Transfer (fully legal, chargeback friendly and easy to track methods) and on their site is listed only Bitcoin payment?
Now when I think about it, lying about payments methods is a HUGE red flag and prime indicator of possible scam waiting to happen.