CoinGames is back!

[CoinGames]

To be honest, I cant find the transaction Id,  I send a lot of small transaction so Its almost impossible for me to find.  We will just say I lost.  I like the Idea of you game and will play again in a few days. Hope I have better luck.

Thanks for the response

I'll tell you what... I have just sent you BTC0.02 to 1H7E7YqMoWQZsUCumbvyASYJzpnz3dudaB as a gift!

I hope to see you back playing CoinGames soon. 

[i3lome]

Wow, Thank you. Im about to head to sleep right now, I can confirm I have received it. I'll go ahead and try again tomorrow when I get up. Thank you again.

[CoinGames]

From August 4th house edge will be 2%. In other words odds will be 0.48 to win and payout x2.

We will notify here and in our FAQ of any changes.

[ToLy]

I don't get the game, there are 3 cups and 3 bitcoin chips, what's the difference ? what are the odds ?

[i3lome]

I just pick a cup and hope to win

[toddtervy]

The cups move so fast I can't keep track.  Can i bet on 2 cups?

[Mooshire]

Does the animation actually have anything to do with the results? Because it lands on the same one every time.

[vlees]

Does the animation actually have anything to do with the results? Because it lands on the same one every time.

It's just a random gif. The result gets calculated somehow per transaction but the person running this still did not explain HOW this is done.

[Mooshire]

Does the animation actually have anything to do with the results? Because it lands on the same one every time.

It's just a random gif. The result gets calculated somehow per transaction but the person running this still did not explain HOW this is done.

Some kind of provably fair thing would be great.

[CoinGames]

Does the animation actually have anything to do with the results? Because it lands on the same one every time.

It's just a random gif. The result gets calculated somehow per transaction but the person running this still did not explain HOW this is done.

Some kind of provably fair thing would be great.

It's just a simple odds/dice game. It is not a game of skill. The animation is irrelevant to the actual result. Each time you bet we generate a random result where you have 0.48 probability of winning and get paid your bet amount x2 when you win. In other words, house edge is 2%.

We are working on the provably fair thing, new games and lots of fun stuff.

[CoinGames]

By the way, CoinGames was recently hacked. Losing just over 4 BTC (thank goodness we were still in Beta!).

We are trying to find out who, and more importantly, how they did it. Any help would be appreciated.

We do know that the Bitcoin address that the coins were sent to is:  

Hacker https://blockchain.info/address/16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

As you can see, they seem to have run off with almost 420 BTC, of which 4.18 BTC belonged to CoinGames.

So if anybody else has been a victim, or knows the owner of this address, let us know:
16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

But much more importantly, we want to know how. We were using the blockchain wallet and API, which is supposedly quite safe. I understand there have recently been some security issues with Android wallets, due to the Android faulty RNG, however this is the first I hear of problems with the online blockchain wallet.

Any help and/or info will be appreciated.

[knowitnothing]

By the way, CoinGames was recently hacked. Losing just over 4 BTC (thank goodness we were still in Beta!).

We are trying to find out who, and more importantly, how they did it. Any help would be appreciated.

How do you plan to receive any help regarding the part "how they did it" ? So far you didn't manage to explain how the results were made (all you said the player had x% chance to win, but what method did you use ?), so it seems unlikely that you can explain how your entire code works (or how it doesn't work, since you were hacked).

To properly figure out "how they did it", you will mostly likely need to open source your code and hope someone looks at it. If you are not planning to do that, I predict that at best you will get irrelevant comments. So let me start with a comment that might very well be irrelevant: how did you protect the wallet's password ? how did you protect your servers ? do you run any kind of SQL database and can I query it through your site ? ...

[BRules]

Any help and/or info will be appreciated.

We will need more details if you want a help:

- how your system was working with the blockchain.info api
- was the main wallet also a blockchain.info wallet?
- if so, do your main blcokchain.info wallet had any alias and was the password used by you on the wallet unique?

[uoyeparannog]

@CoinGames sent You PM.

[b!z]

By the way, CoinGames was recently hacked. Losing just over 4 BTC (thank goodness we were still in Beta!).

We are trying to find out who, and more importantly, how they did it. Any help would be appreciated.

We do know that the Bitcoin address that the coins were sent to is: 

Hacker https://blockchain.info/address/16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

As you can see, they seem to have run off with almost 420 BTC, of which 4.18 BTC belonged to CoinGames.

So if anybody else has been a victim, or knows the owner of this address, let us know:
16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

But much more importantly, we want to know how. We were using the blockchain wallet and API, which is supposedly quite safe. I understand there have recently been some security issues with Android wallets, due to the Android faulty RNG, however this is the first I hear of problems with the online blockchain wallet.

Any help and/or info will be appreciated.

There was faulty RNG on desktop browsers too, I think.

[CoinGames]

By the way, CoinGames was recently hacked. Losing just over 4 BTC (thank goodness we were still in Beta!).

We are trying to find out who, and more importantly, how they did it. Any help would be appreciated.

We do know that the Bitcoin address that the coins were sent to is: 

Hacker https://blockchain.info/address/16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

As you can see, they seem to have run off with almost 420 BTC, of which 4.18 BTC belonged to CoinGames.

So if anybody else has been a victim, or knows the owner of this address, let us know:
16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

But much more importantly, we want to know how. We were using the blockchain wallet and API, which is supposedly quite safe. I understand there have recently been some security issues with Android wallets, due to the Android faulty RNG, however this is the first I hear of problems with the online blockchain wallet.

Any help and/or info will be appreciated.

There was faulty RNG on desktop browsers too, I think.

Interesting. I missed that. Link please?

[CoinGames]

Let me give a bit more info, since it seems that people here are willing to help.

Our gaming engine was not hacked. The hackers simply sent themselves the full balance of our 3 betting addresses which had just over 1 BTC each.

My guess is that they acquired the private keys for those addresses. Either by some flaw in the server's supposedly secure communications with blockchain.info or by exploiting some flaw with blockchain.info's online wallet's RNG.

The hacked addresses had been used many times over a 2 month period and were vanity addresses. So they would have been vulnerable to a flaw similar to the one in the blockchain mobile wallet.

Bet at these addresses:
1CupN8S71dVcWRE2LcFc4CwymUbSAefBpA ---1CUPh77AYNHfBibqLuRJvLSyuYPDRrsPV ---1cupbpTMyLZFPmoG2BW32hZk1d26wvGGh

From the activity I see at the receiving address, we were clearly not the only victims. Many more BTC were taken from others. I'm surprised nobody else has come up with a similar story.

The hacker owner of 16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM has taken over 400BTC... so somebody else must have seen this..

[BRules]

if he got your private keys, why he would send the change back to your address? why he didn't take all the coins?

In my opinion there is a flaw in your gaming system that he exploited.

[CoinGames]

if he got your private keys, why he would send the change back to your address? why he didn't take all the coins?

In my opinion there is a flaw in your gaming system that he exploited.

I don't understand what you mean. You can clearly see here

https://blockchain.info/address/1CupN8S71dVcWRE2LcFc4CwymUbSAefBpA
https://blockchain.info/address/1CUPh77AYNHfBibqLuRJvLSyuYPDRrsPV
https://blockchain.info/address/1cupbpTMyLZFPmoG2BW32hZk1d26wvGGh


That on 2013-08-25 our 3 addresses were emptied. He did take all the coins.

[BRules]

You're talking about this transaction:
https://blockchain.info/tx/ed0638d8b13ac8c1c032c2e228a1fa03a394b5eae98dea056909e8783943ca41
right?

As you can see he sent 4 bitcoins to his address but the change (0.0357598) was sent back your address, if he had you private keys, why he would do that?