Primedice.com | Since 2013 | Longest Running Crypto Casino | 113 BTC Jackpot!

[Gws24]

Stunna said in chat that the guy abused an exploit and thereby used an unhashed seed; so he could predict the rolls. Obviously won't be allowed to withdraw.

He managed to withdraw 40 coins here before we caught him

https://blockchain.info/address/14HQ67ZhmATviHi9RdYhbUriAGSFmJpYoB

We're investigating this now, I think I know what's happening though but I'm not going to reveal it until we've 100% patched it up.


Naturally the "this is rigged" etc arguments will start rolling in but at the end of the day anyone can mathematically verify all rolls they made. I'll explain how he managed to get an unhashed seed when we've resolved this. Working on it now

Quite a big theft then but then he probably ran into the hot wallet limits? Also, he was doing it again as user pahahaha but you're probably already aware of that. Looking forward to the statement about this.

[1714761728]

1714761728

[1714761728]

1714761728

[1714761728]

1714761728

[Associates]

Could an admin or moderator of the website please unmute me on PrimeDice? I have been muted for over 2 days and i already sent an email in.

User : Associates

[King Agamemnon]

wow this is crazy, would love to see ur argument for it not being rigged

Do you understand how a dice game and provably fair works? First try to understand that, then reply again.

If you have the server seed you can obviously know all the outcomes, that is what happened. That has nothing to do with "being rigged".

lol maybe this guy is a newbie.
Anyway, there is a lot of dice betting sites and most of them are provably fair.

[Candystripes]

Could an admin or moderator of the website please unmute me on PrimeDice? I have been muted for over 2 days and i already sent an email in.

User : Associates

Yeah same here, username: Candystripe

Mods are getting quite annoying tbh, anyone agree?

[omahapoker]

can someone explain how to do this and how i can get away with it?







thanks

[Ejaculation]

can someone explain how to do this and how i can get away with it?







thanks

You've got to be joking about this post bro. If you are joking, it's not funny at all. If you aren't, go buy some intelligence at the nearby elementary school.

[MadZ]

Stunna just said in chat that the guy abused an exploit and therefore could use an unhashed seed; so he could predict the rolls. Obviously won't be allowed to withdraw.

Why people abuse exploits like this?

He could earn some buck either by telling Stunna about the bug or by moderating his luck, but the way he did  he got no winnings

He withdrew 40 btc and probably took a lot more without detection before this run. The thing is, there is no amount Stunna could really offer to make this worthwhile financially for any exploiter, since he can take a great deal more through theft.

[Serlite]

Stunna said in chat that the guy abused an exploit and thereby used an unhashed seed; so he could predict the rolls. Obviously won't be allowed to withdraw.

He managed to withdraw 40 coins here before we caught him

https://blockchain.info/address/14HQ67ZhmATviHi9RdYhbUriAGSFmJpYoB

We're investigating this now, I think I know what's happening though but I'm not going to reveal it until we've 100% patched it up.


Naturally the "this is rigged" etc arguments will start rolling in but at the end of the day anyone can mathematically verify all rolls they made. I'll explain how he managed to get an unhashed seed when we've resolved this. Working on it now

Thanks for letting us know! I hope you guys can get this patched up promptly and thoroughly.

[omahapoker]

can someone explain how to do this and how i can get away with it?







thanks

You've got to be joking about this post bro. If you are joking, it's not funny at all. If you aren't, go buy some intelligence at the nearby elementary school.

your IQ must be high if you can't tell if it's a joke or not

[dooglus]

your IQ must be high if you can't tell if it's a joke or not

It's hard to tell with you sometimes.

With most people it's easy: if it's funny, it's a joke...

Why people abuse exploits like this?

He could earn some buck either by telling Stunna about the bug or by moderating his luck, but the way he did  he got no winnings

Because sites often don't pay well for reported exploits. Just yesterday a guy was posting on the SatoshiDice thread about how he can withdraw his balance twice to double his bankroll, but they don't believe him and so won't pay him.

the way he used the exploit was dumb, betting large amounts that can be seen by other people hmmmm... Obvious way to get caught cheating

Maybe he has been using the exploit in a less obvious way for a while now on other accounts and has already won all the coins he wanted to win. This could be his fun way of "reporting" it.

[freedomno1]

Maybe he has been using the exploit in a less obvious way for a while now on other accounts and has already won all the coins he wanted to win. This could be his fun way of "reporting" it.

Could be doog knowing how some hackers are
Just taking his 40 Bitcoin commission and then showing off the trick of the trade

[King Agamemnon]

Could an admin or moderator of the website please unmute me on PrimeDice? I have been muted for over 2 days and i already sent an email in.

User : Associates

Why did they muted you?
Try to message support or Stunna here.
Its easier that way.

[Stunna]

Maybe he has been using the exploit in a less obvious way for a while now on other accounts and has already won all the coins he wanted to win. This could be his fun way of "reporting" it.

Could be doog knowing how some hackers are
Just taking his 40 Bitcoin commission and then showing off the trick of the trade

It's a pretty complex situation, we put in a basic fix which was defeated and now we're taking stronger measures to ensure this doesn't happen again.

Part of fixing the issue is forcing all accounts to set a new seed pair, in an hour expect to be prompted to set a new pair.

I'll be providing full information later this week after we've done some extensive testing. I am comfortable saying that there was no breach of server or database and all account balances are 100% safe, no accounts should be effected by this issue it only effects us.

[Rampton]

Stunna just said in chat that the guy abused an exploit and therefore could use an unhashed seed; so he could predict the rolls. Obviously won't be allowed to withdraw.

Why people abuse exploits like this?

He could earn some buck either by telling Stunna about the bug or by moderating his luck, but the way he did  he got no winnings

What else could it be other than greed? Stunna mentioned that he withdrew 40btc before he was caught and I doubt the bounty for bugs would've been this big. Shame about the exploit and the fact that it was exploited but these are sadly just part of the business.

[🏰 TradeFortress 🏰]

WARNING / UNRESOLVED WARNING / UNRESOLVED WARNING / UNRESOLVED WARNING / UNRESOLVED WARNING / UNRESOLVED WARNING / UNRESOLVED WARNING / UNRESOLVED

 I have been playing on PD for over 2 years and many hundreds of bitcoin wagered. Not a whale of anything of that nature but a liked to gamble some extra money in my spare time. Well, like most, my luck ran out and I ended up losing a bit in the end. Alright.

Recently it came to my attention that (quote) "it was found that the house edge was actually higher than 1% because of the rounding they placed on all rolls. At least 1 in 20,000 bets were marked as losing bets when they should of been a winning bet. All bets had a 1.05% to 50% house edge. It may seem small, but when there have been 781,000,000 bets for a total of 408,000B wagered, it is actually very meaningful."
ref to topic: https://bitcointalk.org/index.php?topic=208986.7880

So, out of pure interest I went to look at the published list of users affected and would you believe it, I happened to be on the list twice. Once for a .01btc bet and once for a .02 btc bet, both on 2x payout.
I had my 'strategy' figured out on primedice Wink I would pre-roll 5 reds then start to martingale at .01 hope to bloody hell it goes green soon Smiley I did pretty well in the beginning but eventually I hit that streak that we fear and we are in a loss. 'Those' streaks only happened about 2/3 times to me as I am not a millionaire and cannot afford to double up much at all from such a high base bet.

So I learn that I have been a 'victim' (for lack of a better word) of the flaw that was on PD and consequently lost my beloved .03 btc. Well, at least the site is being kind enough to publish the list of users effected. I personally am amazed that my luck was so bad that I am on that list but there you go. There is now a glimmer of hope however, lets see what PD support says. The guy who replied was super fast, glad to help you -after verifying that I was indeed the user claiming to be affected he said 'sure -what's new PD addy and I'll send you the .03btc now!' Nooooow, just hang on a wee moment there buddy, I BET .02 & .01 with a 2x payout -since it's now been 'proven' that I won, then I WON. You at LEAST owe me the wager + winnings. He/she/it said 'I will double check' and shortly came back to confirm that indeed I am right.

Secondly, and all along, I had been asking to see the subsequent bets after these affected bets, because, if I wagered .02 and lost, I would have doubled up and perhaps lost again, and again -it it might have been this streak that killed me. There were not too many so I have a damn good reason to think it's possible. I pointed this out again to support, who said although the do not agree with my theory they can look into the matter but it would take 'significant' time and I may end up getting nothing back. What he could do was offer me a few pennies worth of btc as a consultation. I told him I am not interested in a meager handout from his back pocket of a few satoshi - I bet hundreds of dollars and may have been duped from the ineptness of the sites ability to process a simple bet on 2x. IF I had won that 2x bet, instead of being a couple btc in arears, I would have been in profit. YOU'RE site FUCKED me out out my BTC. Sorry for the french but I am not some decrepit lowlife playing from faucet, I was/am a serious customer of PD. Even on PD3 I was excited and I am lv25 or something.

I did not have a answer now for 2 days from support. They said the dev's would have to find the results and they would get back to me. I am hoping they do as I still have faith in PD but it wears thin now. I don't know what to make of this error except that I am sad I fell victim to it. I hope PD steps up to the plate on this one, show the people they are a decent bunch and pay back a customer IN FULL when there has frankly been a heinous breach of trust.

Lain

Here is a list of users affected:

Sarah: 49.5 was 49.499 @ 0.25600000000000000000
jp1966: 49.5 was 32.673 @ 0.10240000000000000000
Sisoje: 49.5 was 49.499 @ 0.10240000000000000000
grigina: 50.5 was 50.501 @ 0.09102816000000000000
Zodiac: 49.5 was 49.499 @ 0.05000000000000000000
Purcell: 49.5 was 1.021 @ 0.04000000000000000000
hhhr: 50.5 was 50.499 @ 0.04000000000000000000
lucaspm982: 50.5 was 50.498 @ 0.03500000000000000000
Bright: 50.5 was 48.864 @ 0.03418000000000000000
Toje: 49.5 was 49.499 @ 0.03242097000000000000
Skeppy: 49.5 was 49.498 @ 0.02500000000000000000
Wavey: 49.5 was 38.559 @ 0.02000000000000000000
Tuffies78: 50.5 was 32.794 @ 0.02000000000000000000
Lain33: 49.5 was 49.495 @ 0.02000000000000000000
IZACS: 49.5 was 49.501 @ 0.01600000000000000000
Eltan: 50.5 was 7.44 @ 0.01600000000000000000
Zodiac: 49.5 was 49.504 @ 0.01600000000000000000
miloslim1: 49.5 was 49.498 @ 0.01280000000000000000
murcury12345: 49.5 was 55.929 @ 0.01280000000000000000
jp1966: 49.5 was 40.572 @ 0.01280000000000000000
TinaTTMM: 50.5 was 50.495 @ 0.01200000000000000000
applesauce1: 49.5 was 49.496 @ 0.01111110000000000000
yoo3311: 49.5 was 56.772 @ 0.01100000000000000000
shinet: 49.5 was 49.496 @ 0.01040006000000000000
ORANGEDEVE: 50.5 was 50.502 @ 0.01031520000000000000
maniana: 49.5 was 49.498 @ 0.01024000000000000000
amigo: 50.5 was 50.496 @ 0.01024000000000000000
troyrPD: 49.5 was 49.495 @ 0.01000000000000000000
keylo: 49.5 was 49.504 @ 0.01000000000000000000
Ashlamar: 49.5 was 40.899 @ 0.01000000000000000000
Lain33: 49.5 was 49.505 @ 0.01000000000000000000
hemp: 50.5 was 50.497 @ 0.01000000000000000000
davida: 49.5 was 62.537 @ 0.01000000000000000000
btcboss: 50.5 was 50.496 @ 0.01000000000000000000
amigo: 49.5 was 49.495 @ 0.01000000000000000000
ultima32: 49.5 was 49.498 @ 0.00952300000000000000
playerone: 49.5 was 49.503 @ 0.00909855000000000000
hui: 49.5 was 49.505 @ 0.00900000000000000000
mephy: 49.5 was 49.501 @ 0.00800000000000000000
blizard2014: 49.5 was 49.503 @ 0.00800000000000000000
hegel: 49.5 was 70.863 @ 0.00800000000000000000
Lan: 49.5 was 49.504 @ 0.00753147000000000000
topo: 50.5 was 50.495 @ 0.00692155000000000000
mephy: 49.5 was 49.501 @ 0.00672000000000000000
coinad: 49.5 was 49.502 @ 0.00645069000000000000
robertus: 50.5 was 95.434 @ 0.00640000000000000000
cheifkeef: 50.5 was 31.207 @ 0.00640000000000000000
fritzzz25: 49.5 was 49.498 @ 0.00640000000000000000
keylow: 49.5 was 49.496 @ 0.00620000000000000000
daimon: 49.5 was 49.503 @ 0.00524288000000000000
Blcsa: 49.5 was 49.503 @ 0.00500000000000000000
timmmm: 49.5 was 68.621 @ 0.00500000000000000000
Mates1337: 49.5 was 49.502 @ 0.00500000000000000000
timmmm: 49.5 was 45.5 @ 0.00500000000000000000
dobe: 50.5 was 50.496 @ 0.00500000000000000000
Draiko: 49.5 was 49.503 @ 0.00447200000000000000
Mitchel87: 50.5 was 50.502 @ 0.00409600000000000000
vifit: 50.5 was 50.502 @ 0.00400000000000000000
ruude25: 50.5 was 50.501 @ 0.00400000000000000000
Kit1234567: 50.5 was 50.499 @ 0.00400000000000000000
Draiko: 49.5 was 49.667 @ 0.00400000000000000000
jp1966: 49.5 was 49.504 @ 0.00400000000000000000
Bjorn1010: 49.5 was 49.505 @ 0.00370000000000000000
playerone: 50.5 was 50.504 @ 0.00356516000000000000
ultima32: 49.5 was 49.503 @ 0.00339300000000000000
bithero: 49.5 was 49.499 @ 0.00320000000000000000
Didldak: 49.5 was 80.194 @ 0.00320000000000000000
pale: 49.5 was 49.496 @ 0.00320000000000000000
xxChange: 49.5 was 49.496 @ 0.00279848000000000000
blank: 49.5 was 49.502 @ 0.00262144000000000000
bithero: 49.5 was 24.276 @ 0.00262144000000000000
BTCwillRISE: 50.5 was 50.495 @ 0.00250000000000000000
Androee: 49.5 was 49.501 @ 0.00250000000000000000
istanbulll: 49.5 was 49.501 @ 0.00250000000000000000
Yoshiiiiiii: 49.5 was 49.498 @ 0.00210000000000000000
WhyMeNoWin: 49.5 was 49.501 @ 0.00209995000000000000
tryingagain: 49.5 was 49.504 @ 0.00209712000000000000
nznl: 50.5 was 50.501 @ 0.00202816000000000000
Zodiac: 49.5 was 53.153 @ 0.00200000000000000000
omarhesa: 49.5 was 49.499 @ 0.00200000000000000000
xsdman923x: 49.5 was 69.914 @ 0.00200000000000000000
zyndr1: 49.5 was 49.504 @ 0.00200000000000000000
dakota: 49.5 was 39.319 @ 0.00200000000000000000
mishel: 49.5 was 49.499 @ 0.00200000000000000000
zyndr1: 49.5 was 49.497 @ 0.00200000000000000000
bithero: 49.5 was 49.501 @ 0.00200000000000000000
elmagico: 50.5 was 50.503 @ 0.00200000000000000000
omrgg: 49.5 was 49.502 @ 0.00200000000000000000
keylow: 49.5 was 49.499 @ 0.00200000000000000000
POSITIVE: 49.5 was 49.496 @ 0.00200000000000000000
iheartubuntu: 49.5 was 49.497 @ 0.00200000000000000000

-----------------------------------------------------

******UPDATE*************UPDATE******UPDATE******UPDATE******UPDATE******UPDATE

Okay so primedice sends me an email saying (verbatim):

Dev:





streaked losses after effected bet = 1:


Lain33: LOSS @ 0.0200000000000000000


Lain33: LOSS @ 0.0400000000000000000



= 0.12 Session 1 total effected profit




Lain33: LOSS  @ 0.01000000000000000000


Lain33: WIN    @ 0.02000000000000000000




Session 2:




0.02 total effected losses session 2. Streaked losses after effected bet = 0



Total due: .14


We've added a bonus due to delay


Adjusted total: 0.2


-----------------------------------------

WTF is this? I have been asking for the bet ID's for ages but the refuse to help any further. What kind of website advertises being fair then sends me this bullshit response? I must just 'beleive' this unofficial reponse from admin? WHERE THE HELL ARE THE BET ID'S -SURLEY IF THE DEVOLPER WENT THROUGH THE TROUBLE TO FIND MY BET HE WOULD ALSO INCLUDE THE BET ID'S IN THE REPLY -EVEN MORE SO SINCE I SPECIFICALLY STATED I REQUIRED THAT INFORMATION?!

On another note: PD advertised that I would increase my faucet if I wagered / chatted etc and built up my level. Now twice they have HALVED MY FAUCET- their stupid argument is why am I complaining about 'free money' HAHAHA what a pile of shite -I WAGERED OVER 4 BITCOIN (NOT TO MENTIONS HUDREDS ON PD2) IN THE BELIEF I COULD INCREASE MY FAUCET -THIS WAS NOT FREE I TOOK RISK RISK RISK AND NOW THEY JUST CLAIM THE FAUCET BACK?!

I ALREADY ANTICIPATE THE SLEW OF REPONSES FROM PD BACKERS TELLING ME I AM UNGRATEFUL ETC FOR 'FREE MONEY' BLABLABLA. MOST OF THESE PEOPLE ARE SPOTTY TEENAGERS WITH LITTLE TO NO MONEY WHILE I HAVE GAMBLED THOUSANDS WORTH OF BITCOIN ON PD -YET THIS IS THE SHITTY SERVICE I GET?

I WILL POST THIS ON THE PD THREAD AS OFTEN AS I CAN UNTIL I GET SOME REAL ANSWERS. THESE SCUMBAGS TAKE MY BITCOIN BECAUSE OF A MISTAKE AND THEN WONT PROVIDE ME WITH PROOF REGARDING MY AFFECTED BETS? SOUNDS LIKE A BLOODY SCAM TO ME


PEACE

Lain33


Since I have not had a response officially, I will just post this everyday then until I do

Was this resolved?

[BikiniDice]

Part of fixing the issue is forcing all accounts to set a new seed pair, in an hour expect to be prompted to set a new pair.

We (bikinidice) change server seed every rool. That's isn't very pretty for player (need to check every time his pair to make sure of our fair system) but we need to protect our investors coin.

Sites like bikinidice which pick a new server seed for every roll are a real pain to play on for the paranoid gambler. In order to be sure that the rolls are fair, you have to make a note of each new server seed hash, and then pick a new random client seed as well - for every roll - and then verify the rolls afterwards, too.

If any player force the sha256 server seed is a BIG problem. Yes it's difficult but not impossible.

[NLNico]

Part of fixing the issue is forcing all accounts to set a new seed pair, in an hour expect to be prompted to set a new pair.

We (bikinidice) change server seed every rool. That's isn't very pretty for player (need to check every time his pair to make sure of our fair system) but we need to protect our investors coin.

Sites like bikinidice which pick a new server seed for every roll are a real pain to play on for the paranoid gambler. In order to be sure that the rolls are fair, you have to make a note of each new server seed hash, and then pick a new random client seed as well - for every roll - and then verify the rolls afterwards, too.

If any player force the sha256 server seed is a BIG problem. Yes it's difficult but not impossible.

Lol?

[TheBomber999]

Lol?

I think if you had some coin of other player you need to take more care than a "lol" 

[philiveyjr]

Part of fixing the issue is forcing all accounts to set a new seed pair, in an hour expect to be prompted to set a new pair.

We (bikinidice) change server seed every rool. That's isn't very pretty for player (need to check every time his pair to make sure of our fair system) but we need to protect our investors coin.

Sites like bikinidice which pick a new server seed for every roll are a real pain to play on for the paranoid gambler. In order to be sure that the rolls are fair, you have to make a note of each new server seed hash, and then pick a new random client seed as well - for every roll - and then verify the rolls afterwards, too.

If any player force the sha256 server seed is a BIG problem. Yes it's difficult but not impossible.

I would find it hard to keep track of each server seed if I run an automatic bot. How do I verify each roll in that case?

[BikiniDice]

I would find it hard to keep track of each server seed if I run an automatic bot. How do I verify each roll in that case?

Yes it's so hard to track server seed with auto-bet, we need to working on some API calls to solve this untrust.