bustadice – Next Generation Dice

[suchmoon]

Sigh.. not a troll.  5-500BTC loan for litigation case financing.  The 0.05 loan was legitimate and now no longer needed as my funds were cleared by Coinbase (ACH transfer).

See photo for my primedice account showing the transaction hash

Yes, a troll, and a scammer probably... litigation financing my ass.

A bit about me - I live in the USA and am an attorney that is actively practicing and still fairly new to the profession - graduated in 2016. 

Much attorney wow legal:

https://bustadice.com/tos

Users that are citizens or residents of any of the following jurisdictions are prohibited from using the service:
[...]
United States of America

[snooched]

Sigh.. not a troll.  5-500BTC loan for litigation case financing.  The 0.05 loan was legitimate and now no longer needed as my funds were cleared by Coinbase (ACH transfer).

See photo for my primedice account showing the transaction hash

Yes, a troll, and a scammer probably... litigation financing my ass.

A bit about me - I live in the USA and am an attorney that is actively practicing and still fairly new to the profession - graduated in 2016. 

Much attorney wow legal:

https://bustadice.com/tos

Users that are citizens or residents of any of the following jurisdictions are prohibited from using the service:
[...]
United States of America

Lol I give up.

[snooched]

Update: Daniel did reply and kindly provided the bitcoin address to which my funds (and the only withdrawal transaction) were withdrawn to.  I'm left with the BTC address

bc1qd26c4eev3vhz3jgyd6wu38hnaglwa7l6z0r6fs

Any ideas?  Crypto-newb here.  Thanks

[RHavar]

Either he made a mistake or he is paid by a competitor to post lies here.

I think the "paid by a competitor to post lies" is something that seems logical, but in my estimation pretty much never happens. I'm not exactly sure why, but if I had to guess, the competitors that would ostensibly benefit the most are in that position because they've worked hard on building a trustworthy brand and focused on making a good product.  Plus a bunch of FUD around bitcoin-casinos could likely indirectly harm them more than what they'd directly gain.

Update: Daniel did reply and kindly provided the bitcoin address to which my funds (and the only withdrawal transaction) were withdrawn to.  I'm left with the BTC address

bc1qd26c4eev3vhz3jgyd6wu38hnaglwa7l6z0r6fs

Any ideas?  Crypto-newb here.  Thanks

Ok. So that's interesting. So it means the withdrawal happened:

2019-12-10 14:36

And the deposit you linked to earlier would've confirmed at:

2019-12-10 14:34

---

So basically within 2 minutes of the funds hitting your account, they were withdrawn. You also mention your account was deleted, which requires a passwords. So my money is strongly on someone else must have had your account/password?

You could also probably consider contacting chainalysis.com, and asking them to flag that address. They work with a lot of exchanges, and it's possible it'll help lead to the recover of your funds if they are deposited to an exchange or something like that


--

Edit: Did Daniel actually give your that address? Or did you just find it on a block-explorer? Because it doesn't really add-up to me. You deposited 0.14 BTC, but then 0.13856977 BTC was immediately sent to that address.  So there's about ~$10 missing. If it was a compromised account, why wouldn't they take the entire balance of the account? It would be odd for them to gamble on a compromised account (as the real owner would likely notice) and it would be odd to not hit "max" on the withdrawal form.

[snooched]

Thanks I will try chainanalysis.

As to the discrepancy in the amount of 0.001~ I am assuming that it is attributable to the commission or fees that bustadice takes for withdrawals? Or deposits? Could be wrong.

I checked and it appears that my funds are now parked at a BTC address with a total of approximately .18 or so BTC. The funds are sitting there so hopefully chainanalysis will help.

Thanks for your suggestion.


Edit* realized I didn’t respond directly to the post above. Yes Daniel provided me that address after spamming his emails and the support link with my requests. He stated that there was only one withdrawal and that was the address he provided.

Apologies for the heated OP that I posted but hope it is understandable that I’m frustrated about this and being new to crypto doesn’t help much in terms of my understanding and attempt in seeking a resolution here.

[RHavar]

As to the discrepancy in the amount of 0.001~ I am assuming that it is attributable to the commission or fees that bustadice takes for withdrawals? Or deposits? Could be wrong.

Seems unlikely. Bustadice is quoting me 2531 satoshis for an instant withdrawal (although that amount is constantly changing), while the amount missing is 143023 satoshis, which to me seems way too high to chalk off as fees.
Assuming everything in your story is as described, it could give interesting insight. I would try chase up exactly what happened. We have a few possibilities if your account was compromised:

a) They gambled the $10, then decided with withdraw the rest.

If so, why were they not worried about getting noticed?


b) They withdrew everything but $10, which they left to gamble.

If so, this seems to indicate they are a compulsive gambler, or something?


c) They were sloppy and just threw away $10?  

If so, weird. The withdrawal form has a "max" (and iirc default to it).

I checked and it appears that my funds are now parked at a BTC address with a total of approximately .18 or so BTC. The funds are sitting there so hopefully chainanalysis will help.

I would be careful to not try do your own blockchain analysis, it's quite a bit more subtle than you imagine. Just report the direct address you were given (even though it currently has 0 balance), if you didn't withdraw there -- and let the experts try track where it flowed to.

[Findingnemo]

Edit* realized I didn’t respond directly to the post above. Yes Daniel provided me that address after spamming his emails and the support link with my requests. He stated that there was only one withdrawal and that was the address he provided.

Apologies for the heated OP that I posted but hope it is understandable that I’m frustrated about this and being new to crypto doesn’t help much in terms of my understanding and attempt in seeking a resolution here.

Are you sure that you did send funds to the right address?

No one will believe you when you don't have any evidence other than stories.

AFAIK, no one faced this kind of issue while using Bustadice.

500BTC loan and claiming a reputed gambling site scammed you, Am I the only one get feeling of trolls here.

[devans]

snooched, so far I have responded to all of your emails within 12 hours, so I'm not sure why you are framing it as if I'm ignoring you in some of your posts. Please have some understanding for why I cannot reply to all emails immediately: As I also run bustabit I receive dozens of emails every day and on particularly busy days there can be upwards of 100 messages. It is impossible to respond to every email right away while also getting anything else done that day. For that reason I only check my inbox a few times a day and ask that people wait up to 24 hours for my response, which I believe is reasonable.

bustadice doesn't provide account support via the forum and I don't publicly comment on support requests, so if you have questions regarding the specifics of your support request please keep them to our existing email thread. That being said, I will state a few general things:

Withdrawing from bustadice requires the account's login credentials. It is impossible to withdraw from bustadice without knowing the account's password and 2FA code (if enabled). The same applies to deleting an account. Someone being able to withdraw from an account or delete it means that they knew its login credentials.

bustadice does not store users' password anywhere and there is no indication whatsoever that bustadice itself was compromised. In my experience, when a user's login credentials are compromised it is usually because their computer is infected by malware (especially if they recently tried some sort of "bustadice hack", "bustadice predictor" or similar) or they inadvertently showed the attacker their login credentials, e.g. while sharing their screen.

[snooched]

snooched, so far I have responded to all of your emails within 12 hours, so I'm not sure why you are framing it as if I'm ignoring you in some of your posts. Please have some understanding for why I cannot reply to all emails immediately: As I also run bustabit I receive dozens of emails every day and on particularly busy days there can be upwards of 100 messages. It is impossible to respond to every email right away while also getting anything else done that day. For that reason I only check my inbox a few times a day and ask that people wait up to 24 hours for my response, which I believe is reasonable.

bustadice doesn't provide account support via the forum and I don't publicly comment on support requests, so if you have questions regarding the specifics of your support request please keep them to our existing email thread. That being said, I will state a few general things:

Withdrawing from bustadice requires the account's login credentials. It is impossible to withdraw from bustadice without knowing the account's password and 2FA code (if enabled). The same applies to deleting an account. Someone being able to withdraw from an account or delete it means that they knew its login credentials.

bustadice does not store users' password anywhere and there is no indication whatsoever that bustadice itself was compromised. In my experience, when a user's login credentials are compromised it is usually because their computer is infected by malware (especially if they recently tried some sort of "bustadice hack", "bustadice predictor" or similar) or they inadvertently showed the attacker their login credentials, e.g. while sharing their screen.

Yes thanks Daniel and apologies for my urgency.  Got a bit too heated and still am frustrated about the situation.  I appreciate your help and take back my earlier posts. 

.14 BTC may not be much for you BTC Titans on here lol but it really means a great deal to me and I am really left not knowing what to do here.   

[Findingnemo]

.14 BTC may not be much for you BTC Titans on here lol but it really means a great deal to me and I am really left not knowing what to do here.   

Check the device you did use for accessing bustadice for any malware or trojans, It's likely you got phished and someone stole your money. If that is the case here then nothing can be done you just lost it, bro.

[malevolent]

Check the device you did use for accessing bustadice for any malware or trojans

*wipe/reflash/reinstall OS before using again.

If he got phished he can also check his browsing history, maybe something will ring a bell.

[finaleshot2016]

Check the device you did use for accessing bustadice for any malware or trojans

*wipe/reflash/reinstall OS before using again.

If he got phished he can also check his browsing history, maybe something will ring a bell.

Then after that, try to bookmark the bustadice site to avoid phishing sites.
It's easy to save it as a bookmark by clicking the star in the upper right of the Chrome browser.

I wonder why people keep being phished in these days? There are already multiple extensions that are verified by chrome to secure accounts.

[malevolent]

I wonder why people keep being phished in these days? There are already multiple extensions that are verified by chrome to secure accounts.

I also wonder the same thing. Maybe browsers should be doing more from an UI/UX perspective in protecting the user from his carelessness and gullibility.

[sunsilk]

Then after that, try to bookmark the bustadice site to avoid phishing sites.
It's easy to save it as a bookmark by clicking the star in the upper right of the Chrome browser.

I wonder why people keep being phished in these days? There are already multiple extensions that are verified by chrome to secure accounts.

We don't know how he browse and the practices he do on the web but it's probably he's just searching it through search engines and clicks the first website to show. As we know and being aware of it, the first result is most likely to be an ad/sponsored google ads and google doesn't care about it unless it's reported many times.

It could also be a spyware which has been explained by devans clearly if somebody is interested and requires of downloading some shortcuts to win against bustadice or other casinos.

[RHavar]

I also wonder the same thing. Maybe browsers should be doing more from an UI/UX perspective in protecting the user from his carelessness and gullibility.

Honestly, browsers (and ICANN) have really dropped the ball. The amount of homograph domain attacks I've seen is absolutely absurd to the point of turning the URL bar virtually useless. I've almost been phished myself by a site, whose domain rendered virtually perfectly -- the only way I realized something was amiss was my password manager was not filling the result. Literally the only way to see the domain wasn't what i was expecting, was running it through a unicode decoder.

And another common attack-vector is enabled by Google being almost (?) semi-complicit by allowing people to bid for ads for $BRANDNAME when it's clear people are just googling (often via url bar) for $BRANDNAME

And of course it's also sad that passwordless logins have not got more traction -- as I think the whole idea of a password as a shared secret is just fundamentally bad.


But yeah, there's also some shit you just can't sanely prevent -- like people tricked into running malware

[joksim299]

Brandname advertisemets are in most cases phishing or other social engineering they are doing nothing to prevent it

[adaseb]

I also wonder the same thing. Maybe browsers should be doing more from an UI/UX perspective in protecting the user from his carelessness and gullibility.

Honestly, browsers (and ICANN) have really dropped the ball. The amount of homograph domain attacks I've seen is absolutely absurd to the point of turning the URL bar virtually useless. I've almost been phished myself by a site, whose domain rendered virtually perfectly -- the only way I realized something was amiss was my password manager was not filling the result. Literally the only way to see the domain wasn't what i was expecting, was running it through a unicode decoder.

And another common attack-vector is enabled by Google being almost (?) semi-complicit by allowing people to bid for ads for $BRANDNAME when it's clear people are just googling (often via url bar) for $BRANDNAME

And of course it's also sad that passwordless logins have not got more traction -- as I think the whole idea of a password as a shared secret is just fundamentally bad.


But yeah, there's also some shit you just can't sanely prevent -- like people tricked into running malware

This is probably the reason why many websites especially exchanges usually require a confirmation by email if there is a withdraw attempt. I agree some types of phishing attacks are pretty easy to miss and if you are one of the unlucky ones to actually send your username, password, and 2FA code to a phishing site then its the email confirmation that can actually save you.

I actually found it odd why Bitfinex asks for a different 2FA code when you attempt a legit withdraw. Basically you can't login with 2FA and in less than 120 seconds attempt a withdraw because the 2FA code will be a repeat and it will ask you to wait for a new 2FA code before doing a withdraw. Then I realized it was to prevent a phishing attack because even if you accidently send your username, password and initial 2FA code why would you wait 2 minutes and enter another 2FA code? Most likely you would know something was up and immediately stop and investigate, and even if you sent the second 2FA code most likely you would get an email confirmation that you would halt.

Its pretty crazy how elaborate some of these scams have gotten on casinos and exchanges.

[Findingnemo]

Brandname advertisemets are in most cases phishing or other social engineering they are doing nothing to prevent it

Internet users should have to educate themselves to avoid these phishing attacks if they don't want to lose their money.

It is not possible to remove the fake advertisements on internet because these scammers simply use other fake domain if someone reported currently using.

[CaptainZohan]

Could you please clarify investment terms? What happens when a player wins his bet? Does it decrease my investment part in the bankroll and how?

[xandry]

Could you please clarify investment terms? What happens when a player wins his bet? Does it decrease my investment part in the bankroll and how?

What terms do you need to be clarified? I think that this post can help you to understand what it is and what for:

Congratulations on the launch!

I'm obviously pretty biased (as a partial owner), but I am really excited about this site and it's future. I know dicesites are a dime-a-dozen, but I think bustadice goes a few steps beyond. Things I think are really special:

*  Insane coin-selection optimizations, for both privacy and fees. We'll need real data to know exactly how well it works, but in something like 50-85% of the time (in simulations) it can avoid creating change (which is both expensive and extensively to cluster bitcoin transactions).   And users will enjoy *by far* the lowest fees of any bitcoin service. This alone was 3 months of solid work.


* An advanced "offsite" investor system, that allows investors to not just leverage but say exactly how much they want to invest without having to risk it all to a counter-party. Most investment schemes don't even offer leverage, but when they do they tend to use something like multipliers (e.g. 5x) which means when you lose, you're under utilizing your money and when you're up you're over-leveraging. The offsite system keeps it perfect all the time.


 * A really powerful provably fair system, that gives investors (and everyone) significantly improved guarantees. I tried to create a high level technical overview of how it works: https://gist.github.com/RHavar/285c295f7906e03369cd66580a1b5f45