Primedice.com | Since 2013 | Longest Running Crypto Casino | 113 BTC Jackpot!

[stsms06]

Congrats to Primedice for getting back the site pretty quick and it did not result to too much problems for their gamblers.

Also kudos to them for issuing a refund to those people that were scammed by the phasing site. However, how will you guys give refunds to people that deposited using addresses that they cannot sign from, i.e. from exchanges and other such things.

They can probably request proof of withdrawal from the exchange aka. screenshots, txids etc.

I was asked to, but try to find things that are over 1 year ago  (Username:immerich)

[1714045557]

1714045557

[1714045557]

1714045557

[1714045557]

1714045557

[1714045557]

1714045557

[1714045557]

1714045557

[LuanX3]

Congrats to Primedice for getting back the site pretty quick and it did not result to too much problems for their gamblers.

Also kudos to them for issuing a refund to those people that were scammed by the phasing site. However, how will you guys give refunds to people that deposited using addresses that they cannot sign from, i.e. from exchanges and other such things.

They can probably request proof of withdrawal from the exchange aka. screenshots, txids etc.

True, but still hard to authenticate.

I was asked to, but try to find things that are over 1 year ago  (Username:immerich)

Why are you looking for over 1 year ago? The phising happened just like a week ago, am I missing something here?

[veleten]

glad Primedice is back!
your registrar should have been more responsive and faster in allowing you to regain control
but it should be all good now,its annoying to have your bank account's access to be restored through support
but I got it verified, finally all good,withdrawals are manual at the moment
mine went through in under an hour,so it is not a big deal
p.s. if the primedice 5 logo is the one Stunna posted above,it should be named TronDice
resembles Tron movie/game too much

[Betwrong]

"Password successfully changed"  

You've definitely done the right compelling lazy people like me to reset their passwords before they can make any bets. I wouldn't do that almost for sure otherwise.

Great to see our favorite dice site is back. Good job, PD team! Good luck to all the rollers!

Hey,

Yeah we didn't have to do that and create a LOT of exstra work for us and for support but we want to make sure all our users are safe so that is done to protect you guys.

Atm we are changing it a bit so users with 2fa will be able to login normally. But we STRONGLY recommend you to change your password right after you login with 2fa and old password.

Also withdrawals are set to manual atm so if you have logged into phising site and got your password compromised and attacker somehow manages to login your balance will be safe and we will cancel the withdrawal he made after you contact support.

Please remember that we have millions of accounts on primedice and at this moment all support staff is in the office and working but we are getting huge amounts of new tickets so support will be a lot slower than normal.

I know you all got used to our super fast support with less than 60 seconds first reply time .
But at this moment we cant keep up to that standard.

Please be patient.

edit: One more thing if you did not have any balance on your account feel free to register NEW account and use that in the meantime.

Hey, MICRO,

Thanks for your reply! I hope my words don't appear sarcastic because I didn't mean any sarcasm actually. I know you do everything you can to protect our safety and I'm greatful for that.

Right now PrimeDice is working great as always. I was tipped 10k sats by Zoltan 10 seconds after I logged in. ) Hunting for 99.99 for the moment, but only getting close ones like 99.52 and 99.78 so far. ) Overall, it's nice to see our favorite dice site is up and running again.

[MICRO]

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.

wow, very nice... primedice's prompt action made this happen
the perp must be disappointed getting only 0.05 BTC off this ruse

Here's what the attacker was able to do through his phishing site:
-Collect Usernames/Passwords for users who logged in to his phishing site during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

pretty slick hacker eh? offering 10% bonus
is there a possibility they collected email addresses too? as I remember we can set this optionally, right?
they could try email phishing soon or later, so heads-up guys... be cautious

Hey,

The phishing site actually required you to enter your email. So that is defiantly something we look out for.

Also if you visited phishing site they got your IP which is also bad.

We are doing all we can to still protect users so that is why withdrawals are currently manual and will stay that way untill we are sure all users got their accounts and changed passwords.

Also strong recommendation again and this should not even be optional is to use 2FA. Please guys use 2FA everywhere you can!
 

[MinerHQ]

Also strong recommendation again and this should not even be optional is to use 2FA. Please guys use 2FA everywhere you can!
 

Please take that advice seriously and enable your 2fa feature before you deposit money. This advice is even applicable for all the online sites, not just a gambling sites you should enable 2fa before you deposit money. Not so easy to hack 2fa feature enabled accounts compared to just password protected accounts.

[eaLiTy]

Glad to see that the site is back and running,lost just 0.05BTC which is not bad because of the prompt action by the team,but i still cannot understand how this happened,is this happened because of the domain registrar, because i did not hear about any other hijack during this time,i guess there is a leak from the team itself,hope to hear the details from Stunna soon.

[Xylber]

Glad to see that the site is back and running,lost just 0.05BTC which is not bad because of the prompt action by the team,but i still cannot understand how this happened,is this happened because of the domain registrar, because i did not hear about any other hijack during this time,i guess there is a leak from the team itself,hope to hear the details from Stunna soon.

Meanwhile, contact support. Stunna posts the latests news, but the support can help you in your particular case.

[EnF0Rc3r]

Glad to see that the site is back and running,lost just 0.05BTC which is not bad because of the prompt action by the team,but i still cannot understand how this happened,is this happened because of the domain registrar, because i did not hear about any other hijack during this time,i guess there is a leak from the team itself,hope to hear the details from Stunna soon.

Meanwhile, contact support. Stunna posts the latests news, but the support can help you in your particular case.

I think that he was referring to the loss of the site (0.05BTC), not to himself.  

[bestdoggy11]

Hey Mirco

How you doing bro. Something important, can you check your inbox

Thx

Hey guys,

As many of you are probably already aware we are back up and running! Yeeey!


On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

Also for users safety all withdrawals are currently on manual.

I think what is really scary about this incident is imagine what could of happebed if the hackers weren't lazy.

They would at an unsuspecting time ( when PD dev are sleeping ) commit the hack and make the phishing site look for authentic.

When someone tried to login, they would go to the real PD and perform a withdraw.

The way the registrar handled this situation was very dangerous. Hopefully many Bitcoin sites and services can learn from this incident.

In this case, Primedice can't be reached via IP: if they change the DNS, they can't find the authentic website.
Of course, your idea is valid and can be used in some websites.

Yes but this is not what happened is it?

Basically the registrar redirected the traffic to a different IP.

The old site was still accessible by the old IP.

The hacker would simply record the usernames and passwords and then go to the real Primedice website by the IP address.

Plus, it takes a few hours for DNS to update. It's not instant but bottle necked by the ISP

Well it would be hard to pull off we have 24/7 support which is also always monitoring the site so we would take quick actions at any time. They can always reach me if not all devs and admins.

Thats why having 24/7 support proved to be very important and useful and we are one of the few sites that have it.


Stunna will post more details on how it happened.

It was not even remotely our fault and you will know why soon.

I hope we handled it well in the best way possible for all of our users and even though this was not our fault all the transactions sent to the phishing address will be refunded.

Again thank you all for support on this and for helping us get that phishing waring so fast.

[lite]

Glad to see that the site is back and running,lost just 0.05BTC which is not bad because of the prompt action by the team,but i still cannot understand how this happened,is this happened because of the domain registrar, because i did not hear about any other hijack during this time,i guess there is a leak from the team itself,hope to hear the details from Stunna soon.

Yeah, i'm waiting for details too on how did it happened/who was behind all this. afaik someone social engineered PD's registrar and pointed namerservers to where phishing site was hosted. i'm glad that PD is back now.

[adaseb]

Yes the way they handled the situation was ideal for a crypto related site.

They halted withdraws and they announced everywhere that they were hacked.

Most services wouldn't do this because it's damaging to their credibility, take MtGox and Cryptsy for example.

They got hacked and remained silent until they can into solvency issues.

[SaShiRaJaVu]

Yes the way they handled the situation was ideal for a crypto related site.
They halted withdraws and they announced everywhere that they were hacked.
Most services wouldn't do this because it's damaging to their credibility, take MtGox and Cryptsy for example.

Sure they have handled the situation pretty well by posting about the hack in social media and to this forum and we do like the site because of the team behind it and we trust them through out the years of good service ,but the mystery of how the domain was taken over by hackers is a puzzle for everyone i guess.

[BTCevo]

Yes the way they handled the situation was ideal for a crypto related site.

They halted withdraws and they announced everywhere that they were hacked.

Most services wouldn't do this because it's damaging to their credibility, take MtGox and Cryptsy for example.

They got hacked and remained silent until they can into solvency issues.

I think this is not something that should be braggrd out. But in my point of view, this is somehow become a challenge to the hacker as well, they want to prove that they can solve it. And prove that primedice is not just big as the name outside but they also prove that they have really tight security as well. I do not say what they did is right or wrong but I just see in that way

[adaseb]

Yes the way they handled the situation was ideal for a crypto related site.

They halted withdraws and they announced everywhere that they were hacked.

Most services wouldn't do this because it's damaging to their credibility, take MtGox and Cryptsy for example.

They got hacked and remained silent until they can into solvency issues.

I think this is not something that should be braggrd out. But in my point of view, this is somehow become a challenge to the hacker as well, they want to prove that they can solve it. And prove that primedice is not just big as the name outside but they also prove that they have really tight security as well. I do not say what they did is right or wrong but I just see in that way

I don't think the hacker cares about bragging. If he did then these hackers would just send back all the stolen funds and claim some small bug bounty legally. However that rarely happens unless it's like that White hat hacker on ETH back in 2016.

This wasn't really PD fault however. I would put most of the blame on the registrar.

[Thirdspace]

...but the mystery of how the domain was taken over by hackers is a puzzle for everyone i guess.

This wasn't really PD fault however. I would put most of the blame on the registrar.

... and we already have a solid lead into who it was and how it was done.

yes it wasn't PD fault, and Stunna mentioned they already knew the perp and his technique
lets just wait, I believe soon or later he will disclose all relevant info

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

do these steps only for those who logged on recently at the time of dns hack?
I have very old account that has close to 0 balance , no email set yet and I haven't logged for a long time
but I still want to keep my account rather than creating a new one
when contacting support, what do we need to provide to change password? (or proof of ownership)

[jamyr]

Hi there.

I have been a user since June 2016, I have been a regular player during the first year and lie-lowed. I just learned about PD being down today so I tried to get into my account. It told me to contact support and asked me to provide information like my ISP IP etc etc.

The chat support rep name is "Katarina", and I know she didn't mean to give me more trouble than necessary. Asked me for PD's deposit address, I wasn't able to provide. I told her all I can remember with my account. Whom I exchanged tips with, I gave her names.

Out of curiosity, I tried logging in to my forum.primedice.com account and I was surprised I got in. I told Katarina but I think it didn't do anything. She asked me to send an email from the address linked with my PD account to support@primedice.com, I told her I am not sure, then I received a system generated mail from PD,(screenshot) http://prntscr.com/iq3cy5

So I sent an email from the one where I received the system mail, told Katarina, and she told me that wasn't the email. I'm like WTF, your system just sent me an email and youre telling me this email isn't the right one. So I sent another email using another address which I'm sure I did not use as it is my work/school email, and she said that it is the right one.

Sorry if my story is confusing but I am totally confused to why this is happening,

Also, just a suggestion, don't just make security checks on PD, do it as well for forum.primedice.com as they are supposed to be linked.

[MICRO]

Hi there.

I have been a user since June 2016, I have been a regular player during the first year and lie-lowed. I just learned about PD being down today so I tried to get into my account. It told me to contact support and asked me to provide information like my ISP IP etc etc.

The chat support rep name is "Katarina", and I know she didn't mean to give me more trouble than necessary. Asked me for PD's deposit address, I wasn't able to provide. I told her all I can remember with my account. Whom I exchanged tips with, I gave her names.

Out of curiosity, I tried logging in to my forum.primedice.com account and I was surprised I got in. I told Katarina but I think it didn't do anything. She asked me to send an email from the address linked with my PD account to support@primedice.com, I told her I am not sure, then I received a system generated mail from PD,(screenshot) http://prntscr.com/iq3cy5

So I sent an email from the one where I received the system mail, told Katarina, and she told me that wasn't the email. I'm like WTF, your system just sent me an email and youre telling me this email isn't the right one. So I sent another email using another address which I'm sure I did not use as it is my work/school email, and she said that it is the right one.

Sorry if my story is confusing but I am totally confused to why this is happening,

Also, just a suggestion, don't just make security checks on PD, do it as well for forum.primedice.com as they are supposed to be linked.

Hey,

The email you got is from forum primedice community not from primedice. You can have different emails set on forum and on primedice. So that is why she could not use email you have on forum for your primedice account verification. 

[adaseb]

...but the mystery of how the domain was taken over by hackers is a puzzle for everyone i guess.

This wasn't really PD fault however. I would put most of the blame on the registrar.

... and we already have a solid lead into who it was and how it was done.

yes it wasn't PD fault, and Stunna mentioned they already knew the perp and his technique
lets just wait, I believe soon or later he will disclose all relevant info

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

do these steps only for those who logged on recently at the time of dns hack?
I have very old account that has close to 0 balance , no email set yet and I haven't logged for a long time
but I still want to keep my account rather than creating a new one
when contacting support, what do we need to provide to change password? (or proof of ownership)

I've had a similiar issue also.

I had an account in 2015 and lost my phone and couldn't get the 2fa back and had to make a new account.

When I contacted support back in 2015-2016 and they said that since the account has zero balance to just make a new account because then I won't have to go by the verification process.

[SaShiRaJaVu]

I've had a similiar issue also.

I had an account in 2015 and lost my phone and couldn't get the 2fa back and had to make a new account.

When I contacted support back in 2015-2016 and they said that since the account has zero balance to just make a new account because then I won't have to go by the verification process.

It was a really difficult situation for me too,i would rather start using a new account than looking for my old account because it was hard for me to find my IP address i was logged in while using the site in the first place and second of all i do not remember my wallet address,i have activated 2 fa ,but now even that is not viable because there was an phishing attempt,to be frank if there was balance in your account,it would be hard for anyone to prove his ownership and that will be a really bad situation.