FreeBitco.in-$200 FreeBTC⭐Win Lambo🔥0.2BTC DailyJackpot🏆$32,500 Wager Contest

[Zibi321]

When issue was visible I saw that fbc page was loading and after short period of time it's getting covered by some kind of blockpage.
Like message about locked account is in the foreground and a normal fbc webpage is in the background. I tried to blocked it by adding filter to "ublock" plugin but without success.
Then a tried to check network logs from developer tools built-in browser.
I also saw this suspicious url bitwrecked.
 
Unfortunately I didn't took any usefull screenshots or save any logs.
I know that now it's impossible to proof anything.

At some point when I had these two scripts blocked it started to work
https://www.talkimg.com/images/2024/04/09/Vljab.png

But now even with allowed these two scripts to run, page is loading successfully without any concerns.
It looks and works as usual.

seems they are targeting the winners of the multiply btc list which i am on there.....

I was in the top10 daily jackpot leaderboards for a few days in a row.  It could be it.

https://www.talkimg.com/images/2024/04/09/Vl1cH.jpeg

It just stops auto-roll when you hit 98>= satoshi profit during your rolling session.
To get bonus balance transferred do you "main balance" you have to wager a specific amount of BTC.

in the script its got a user ID of 31898443 who won yesterdays to lock there account.@zibi its the cash travel script that's doing it.

Oh, that's very interesting finding.
My account has different ID, but I believe that scammers have changed the script few hours ago to attack another active user.

[piebeyb]

As far as I know, car prices have skyrocketed in the last few years all over the world.  Is the price of a Lambo actually still only $200,000 in the US? Has FreeBitco adjusted their top prize to account for inflation? 

Never dreamed of owning a Lambo let alone hoping to get it from this site by collecting gold tickets, I actually don't know if the price of the car has increased due to inflation, if indeed the price has increased I'm sure this site has taken it into account well or maybe there is a series or the type of Lambo that is currently worth $200k, no one knows and I'm not a car lover and don't know for sure its current value, we don't need to doubt this team either because they have given away Lambos so far up to the current round. I'm sure the lucky people who have gotten it already know that.

The $200k price may also just be an estimate but I think a prize of that size is worth it and perhaps not all winners take their Lambo and just exchange bitcoins from the winnings as it might be difficult to pick up the Lambo and receive it from across the country not to mention there will be tax difficulties too other fees, so people prefer to exchange it for bitcoin rather than Lambo, BTW I forgot what round it is now, isn't it already into round 10, who won? It seems I haven't seen a winner in round 10 until now.  

[ID482015]

When issue was visible I saw that fbc page was loading and after short period of time it's getting covered by some kind of blockpage.
Like message about locked account is in the foreground and a normal fbc webpage is in the background. I tried to blocked it by adding filter to "ublock" plugin but without success.
Then a tried to check network logs from developer tools built-in browser.
I also saw this suspicious url bitwrecked.
 
Unfortunately I didn't took any usefull screenshots or save any logs.
I know that now it's impossible to proof anything.

At some point when I had these two scripts blocked it started to work
https://www.talkimg.com/images/2024/04/09/Vljab.png

But now even with allowed these two scripts to run, page is loading successfully without any concerns.
It looks and works as usual.

seems they are targeting the winners of the multiply btc list which i am on there.....

I was in the top10 daily jackpot leaderboards for a few days in a row.  It could be it.

https://www.talkimg.com/images/2024/04/09/Vl1cH.jpeg

It just stops auto-roll when you hit 98>= satoshi profit during your rolling session.
To get bonus balance transferred do you "main balance" you have to wager a specific amount of BTC.

in the script its got a user ID of 31898443 who won yesterdays to lock there account.@zibi its the cash travel script that's doing it.

Oh, that's very interesting finding.
My account has different ID, but I believe that scammers have changed the script few hours ago to attack another active user.

I've reported the sire where thr script is hosted for abuse and the bitwrecken domain

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

[dwyane36]

As far as I know, car prices have skyrocketed in the last few years all over the world.  Is the price of a Lambo actually still only $200,000 in the US? Has FreeBitco adjusted their top prize to account for inflation? 

The price of such a luxury car can vary greatly depending on the trim and options. As far as I know, the price of the Lambo Huracan starts at ~$250k and can go up to ~$350k this year. In any case, I don't think it matters since all previous winners of the Lambo lottery most likely preferred to get the prize in BTC equivalent rather than a car.

[decodx]

seems they are targeting the winners of the multiply btc list which i am on there.....

I've just blocked the malicous script with adblock add this  to your block list https://cashtravel.info/forum/main.js

We need to figure out what's injecting that script into the freebitco.in website's HTML. It doesn't seem to be coming from their end, based on what I can see. My HTML source code is clean and free of any suspicious js calls from cashtravel(dot)info domain.

[Garmo]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

[Zibi321]

seems they are targeting the winners of the multiply btc list which i am on there.....

I've just blocked the malicous script with adblock add this  to your block list https://cashtravel.info/forum/main.js

We need to figure out what's injecting that script into the freebitco.in website's HTML. It doesn't seem to be coming from their end, based on what I can see. My HTML source code is clean and free of any suspicious js calls from cashtravel(dot)info domain.

As far as I can see, malicious code is added to main site document named "?op=home"

Below some screenshots how it looks on my side.
https://www.talkimg.com/images/2024/04/09/j2CCf.png
https://www.talkimg.com/images/2024/04/09/j2QYZ.png
https://www.talkimg.com/images/2024/04/09/j2Gi8.png

Edit:
And also in default index document.
https://www.talkimg.com/images/2024/04/09/j2P49.png

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

[Garmo]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

How long would you say the XSS vulnerability was in the site for? Crazy to think it was there all this time until you exploited it proper.

[NK345]

seems they are targeting the winners of the multiply btc list which i am on there.....

I've just blocked the malicous script with adblock add this  to your block list https://cashtravel.info/forum/main.js

i see the same "cashtravel" main.js script in my browser as well.  and i was also in the top 10 before the P2SH message appeared.

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

How long would you say the XSS vulnerability was in the site for? Crazy to think it was there all this time until you exploited it proper.

Idk but i saw the xss vulnerability like a year ago. I believe it existed it for alot of years since they added a specific system that i wont mention. there are also multiple other xss that existed for long that hasnt been fixed

[Garmo]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

How long would you say the XSS vulnerability was in the site for? Crazy to think it was there all this time until you exploited it proper.

Idk but i saw the xss vulnerability like a year ago. I believe it existed it for alot of years since they added a specific system that i wont mention. there are also multiple other xss that existed for long that hasnt been fixed

Interesting. So what critical information could you parse with this xss exploit from the victim's FBC account that you could use for monetary gain? Besides, y'know, scaring them shitless with a message telling them to transfer half a BTC or else.

I'm actually pretty impressed they saw through that bullshit message, by the way. Tracked down the malicious js and blocked it, even. How much BTC did you steal with the address switcheroo?

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

How long would you say the XSS vulnerability was in the site for? Crazy to think it was there all this time until you exploited it proper.

Idk but i saw the xss vulnerability like a year ago. I believe it existed it for alot of years since they added a specific system that i wont mention. there are also multiple other xss that existed for long that hasnt been fixed

Interesting. So what critical information could you parse with this xss exploit from the victim's FBC account that you could use for monetary gain? Besides, y'know, scaring them shitless with a message telling them to transfer half a BTC or else.

I'm actually pretty impressed they saw through that bullshit message, by the way. Tracked down the malicious js and blocked it, even. How much BTC did you steal with the address switcheroo?

i can setup a convincing login page or a verification page but there is no point, if i cant access their email since email requires additional securities these days. the scare message was my desperate attempt to get my final btc because i got into a debt problem after gambling other users money and decided to deposit my own money and borrowed some after losing it all.
i stole 1.3-1.4 in total. Zibi321 could have gotten 9btc in return from my gambling session since i felt bad for him but he decided to lie and ghost me. His money is still on fbc and if only fbc is kind enough to give it back since i spent his balance there.

[Garmo]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

How long would you say the XSS vulnerability was in the site for? Crazy to think it was there all this time until you exploited it proper.

Idk but i saw the xss vulnerability like a year ago. I believe it existed it for alot of years since they added a specific system that i wont mention. there are also multiple other xss that existed for long that hasnt been fixed

Interesting. So what critical information could you parse with this xss exploit from the victim's FBC account that you could use for monetary gain? Besides, y'know, scaring them shitless with a message telling them to transfer half a BTC or else.

I'm actually pretty impressed they saw through that bullshit message, by the way. Tracked down the malicious js and blocked it, even. How much BTC did you steal with the address switcheroo?

i can setup a convincing login page or a verification page but there is no point, if i cant access their email since email requires additional securities these days. the scare message was my desperate attempt to get my final btc because i got into a debt problem after gambling other users money and decided to deposit my own money and borrowed some after losing it all.
i stole 1.3-1.4 in total. Zibi321 could have gotten 9btc in return from my gambling session since i felt bad for him but he decided to lie and ghost me. His money is still on fbc and if only fbc is kind enough to give it back since i spent his balance there.

Lie and ghost you? C'mon. He played you like a damn fiddle from where I'm standing. He says he withdrew his entire balance. Finessed you and got away! And don't get me started on the embarrassing reminder emails you sent him a bunch of times. You didn't have to tell me you were desperate, I could hear your knees clanking all the way out here. Is this your first time heisting?

But anyway, wouldn't you have it in your heart to return the stolen BTC, or are you gonna settle your debts with them?

[NK345]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

So you hate FBC due to their support and house margins?  And you decided to get even with them by stealing innocent people's money?
OK, i can agree about the support levels on their side is disaster, but it is not right to make other people suffer because of it. 
I don't believe that you gambled it all away, but have it somewhere in your own wallet, so I kindly ask if you can find a piece of heart in you and return the ill-gained proceeds.

And if you did you waste it on FBC, then I ask FBC to consider returning the funds to the deceived customers, otherwise these customers will be only a part of their history.

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

No way you orchestrated such a high-profile heist like this just to send a message about FBC's house edge. What's the motivation, really?

i just hate fbc. this wouldnt happen if they actually care for the customers. the website is filled with xss exploits and they know it but they just didnt fix it.

How long would you say the XSS vulnerability was in the site for? Crazy to think it was there all this time until you exploited it proper.

Idk but i saw the xss vulnerability like a year ago. I believe it existed it for alot of years since they added a specific system that i wont mention. there are also multiple other xss that existed for long that hasnt been fixed

Interesting. So what critical information could you parse with this xss exploit from the victim's FBC account that you could use for monetary gain? Besides, y'know, scaring them shitless with a message telling them to transfer half a BTC or else.

I'm actually pretty impressed they saw through that bullshit message, by the way. Tracked down the malicious js and blocked it, even. How much BTC did you steal with the address switcheroo?

i can setup a convincing login page or a verification page but there is no point, if i cant access their email since email requires additional securities these days. the scare message was my desperate attempt to get my final btc because i got into a debt problem after gambling other users money and decided to deposit my own money and borrowed some after losing it all.
i stole 1.3-1.4 in total. Zibi321 could have gotten 9btc in return from my gambling session since i felt bad for him but he decided to lie and ghost me. His money is still on fbc and if only fbc is kind enough to give it back since i spent his balance there.

Lie and ghost you? C'mon. He played you like a damn fiddle from where I'm standing. He says he withdrew his entire balance. Finessed you and got away! And don't get me started on the embarrassing reminder emails you sent him a bunch of times. You didn't have to tell me you were desperate, I could hear your knees clanking all the way out here. Is this your first time heisting?

But anyway, wouldn't you have it in your heart to return the stolen BTC, or are you gonna settle your debts with them?

Update: NVM wrong person. it was not zibi321 but a russian guy which i finessed

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

So you hate FBC due to their support and house margins?  And you decided to get even with them by stealing innocent people's money?
OK, i can agree about the support levels on their side is disaster, but it is not right to make other people suffer because of it.  
I don't believe that you gambled it all away, but have it somewhere in your own wallet, so I kindly ask if you can find a piece of heart in you and return the ill-gained proceeds.

And if you did you waste it on FBC, then I ask FBC to consider returning the funds to the deceived customers, otherwise these customers will be only a part of their history.

No? You didnt read properly? Alot of exploits was there FOR LONG and THEY KNOW SOME exists but DIDNT fix it. There has been numerous attempt to contact them. The time will eventually come that someone will exploit it for their own good if i didnt do it. FBC has the responsibility to protect users and they must give it back using their own money. If you decided to blind about your website security issues, then suffer the consequence. I didnt feel bad for them. FBC profits alot from their unfair system. Dont tell me they cant pay 1btc+ refunds, that just a pure greed. these people that i saw lost 0-10btcs in fbc, they have the funds to restore it.

Note: Last known reports was around 2017-2018. Guess if it was fixed or not.

[Garmo]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

So you hate FBC due to their support and house margins?  And you decided to get even with them by stealing innocent people's money?
OK, i can agree about the support levels on their side is disaster, but it is not right to make other people suffer because of it.  
I don't believe that you gambled it all away, but have it somewhere in your own wallet, so I kindly ask if you can find a piece of heart in you and return the ill-gained proceeds.

And if you did you waste it on FBC, then I ask FBC to consider returning the funds to the deceived customers, otherwise these customers will be only a part of their history.

No? You didnt read properly? Alot of exploits was there FOR LONG and THEY KNOW SOME exists but DIDNT fix it. There has been numerous attempt to contact them. The time will eventually come that someone will exploit it for their own good if i didnt do it. FBC has the responsibility to protect users and they must give it back using their own money. If you decided to blind about your website security issues, then suffer the consequence. I didnt feel bad for them. FBC profits alot from their unfair system. Dont tell me they cant pay 1btc+ refunds, that just a pure greed. these people that i saw lost 0-10btcs in fbc, they have the funds to restore it.

Note: Last known reports was around 2017-2018. Guess if it was fixed or not.

You mentioned you and a number of other people knew of those exploits. How did you relay those concerns to the team to begin with? How did you know the team DID see these reports?

Now that you mention the last known report, and seeing this fiasco go down like this, I'm not feeling confident anymore having funds in this platform with the dumbest security vulnerabilities going unpatched like this.

[FelErYun]

hi :3 i was the one who did it. funny thing i reported stuffs to freebitcoin previously and they ignored it. actually multiple people knew the exploits and was also reported. i waited time to do this and wonder if they still care. i guess not? if you wonder where is the money of those people, i gambled it for those people and blew it all up. its also funny to see people are depositing on a website that has very high house edge. there are alternatives that you can use that has better edge + better support that actually cares for the people.

So you hate FBC due to their support and house margins?  And you decided to get even with them by stealing innocent people's money?
OK, i can agree about the support levels on their side is disaster, but it is not right to make other people suffer because of it.  
I don't believe that you gambled it all away, but have it somewhere in your own wallet, so I kindly ask if you can find a piece of heart in you and return the ill-gained proceeds.

And if you did you waste it on FBC, then I ask FBC to consider returning the funds to the deceived customers, otherwise these customers will be only a part of their history.

No? You didnt read properly? Alot of exploits was there FOR LONG and THEY KNOW SOME exists but DIDNT fix it. There has been numerous attempt to contact them. The time will eventually come that someone will exploit it for their own good if i didnt do it. FBC has the responsibility to protect users and they must give it back using their own money. If you decided to blind about your website security issues, then suffer the consequence. I didnt feel bad for them. FBC profits alot from their unfair system. Dont tell me they cant pay 1btc+ refunds, that just a pure greed. these people that i saw lost 0-10btcs in fbc, they have the funds to restore it.

Note: Last known reports was around 2017-2018. Guess if it was fixed or not.

You mentioned you and a number of other people knew of those exploits. How did you relay those concerns to the team to begin with? How did you know the team DID see these reports?

Now that you mention the last known report, and seeing this fiasco go down like this, I'm not feeling confident anymore having funds in this platform with dumbest security vulnerabilities unpatched like this.

Contact Form and their email. In my knowledge, none of them has any replies or feedback. There is no way they didnt see it because i managed to log them long ago if they see it or not, they did saw it and didnt give a single care.