icecube (OP)
|
|
November 11, 2013, 09:35:58 PM |
|
The owner of bitvegas and bitads.net claims that bitads.net and bitvegas.com were both made insecure by a security flaw. He said no players would be affected by this exploit. After lying and saying everyone would be repaid he has decided not to re-pay me the 7.5 btc I had setting in my account. This is what had taken place in bitvegas. I wanted to withdraw 7.5 BTC from my account after placing bets to increase my loss from previous bets. I thought it would be easy to withdraw as I have done it quite a few times before. Bitvegas' wallet had insufficient funds so I figured I would wait for him to refill the wallet. I thought no problem. I waited about two days to log back in and got a huge surprise, it was missing leaving me with questions without any answers. I know that no one could have withdrawn it due to the wallet having insufficient funds. So, someone had hacked into his minecraft server and gambled my money because the hacker couldn't withdraw because of having insufficient funds in the admin's wallet. A few days after this incident he boldly admits that someone had access to all of the user's accounts. Hello Reddit! Yesterday bitvegas (A Bitcoin Minecraft casino) had a player use an exploit in craftbukkit (The back-bone of Minecraft plugins) to be able to log in as other players, send there money to another account, and withdraw. This exploit was by using a spoofed login packet. The CraftBukkit team has since updated there code, although I was unable to respond quick enough to this as I was offline. The hacker was smart enough to notice there was not enough BTC in the wallet to withdraw my 7.5btc so he boldly gambled it and lost. According to a reddit posted by the site's admin, he said he would pay back all players. He refuses to pay any of it. I have all his information and have submitted it to further investigate him and all of his activities online and offline. I have suspicion to believe he may have taken it himself. Another hack he boldly admits was with a user named em202020. He stole 40 BTC from the wallet of bitvegas. After I had mentioned this, he said no player ever had access to minecraft's server. What do you know a few days after my BTC was stolen he admitted a user using CraftBukkit had access into his server. Bitads.net, another one of his sites was also hacked into https://bitcointalk.org/index.php?topic=328887.0Probably this is a scheme pretending to repay his users by saying he will repay all of them and not actually repaying them. He is pretending these are hacks and he is actually the culprit. He says it was my fault about my password but this is not the case here.
|
|
|
|
Tulak
Newbie
Offline
Activity: 56
Merit: 0
|
|
November 11, 2013, 09:42:33 PM |
|
I have suspicion to believe he may have taken it himself.
Your suspicion is worth jack if you cannot back it up with HARD evidence.
|
|
|
|
icecube (OP)
|
|
November 11, 2013, 09:47:25 PM |
|
I have suspicion to believe he may have taken it himself.
Your suspicion is worth jack if you cannot back it up with HARD evidence. That is why I mentioned I have all his information and have submitted it to further investigate him and all of his activities online and offline.
|
|
|
|
Tulak
Newbie
Offline
Activity: 56
Merit: 0
|
|
November 11, 2013, 10:50:56 PM |
|
whats stopping you from making it public and give your accusation more weight?
|
|
|
|
Martijnvdc
|
|
November 12, 2013, 03:58:40 PM |
|
1) I find this accusation VERY hard to believe... BitVegas has had a very positive influence on this community. He has put a lot of effort and time into his services, and he was always very quick to respond to any issues.
2) Proof?
3) There really was a CraftBukkit security flaw.
|
|
|
|
icecube (OP)
|
|
November 12, 2013, 08:21:29 PM |
|
whats stopping you from making it public and give your accusation more weight?
Just ask me for his information if anyone is in a similar situation. 1) I find this accusation VERY hard to believe... BitVegas has had a very positive influence on this community. He has put a lot of effort and time into his services, and he was always very quick to respond to any issues.
2) Proof?
3) There really was a CraftBukkit security flaw.
1)People do sometimes get greedy. 2)I do have proof. This will not be made public right now. 3)He could have pretended to hack into his server himself.
|
|
|
|
dank
Legendary
Offline
Activity: 1134
Merit: 1002
You cannot kill love
|
|
November 12, 2013, 08:52:41 PM |
|
And I just downloaded minecraft to try the server out. I would like to know for sure if this place is straight, it should be, it's a great idea.
|
|
|
|
BitVegas
|
|
November 13, 2013, 06:36:08 AM |
|
Hey everyone. This is an old issue that happened on August 22nd, 2013. IceCube claims that the BTC was stolen by the server (me). We only keep a limited amount of Bitcoins in the servers withdrawal hot wallet. This is for security on the chance we get hacked, we do not lose all of our funds. When we see the hot wallet is low, we refill it. Occasionally we get many large withdrawals while I am offline and the wallet runs dry. As soon as we notice this we top it up once again, but it does meant that withdrawals will not process until this is done. IceCube tried to withdraw and that the wallet was empty. What happened the next day was the funds were gambled and lost on the games. I received a message from IceCube saying his BTC was missing. I checked the logs and I saw IceCube's failed withdraw attempt (due to the wallet being empty). But during the time the BTC was gambled away our withdrawal hot wallet had over 15 BTC remaining it. So if an attacker gained access to IceCube's account they could of easily withdrawn it. It is true we have been hacked in the past. We are very open about when this happens. You can see the BitVegas hack here: http://www.reddit.com/r/Bitcoin/comments/1lx1y4/minecraft_casino_bitvegas_hacked_and_poker_alpha/And the BitAds.net hack here: https://bitcointalk.org/index.php?topic=267825.msg3528865#msg3528865The issue involving the spoofed packets used to login (linked above) was using a vulnerable CraftBukkit version that was patched in on September 4th (3 days before the hack). This was our biggest hack to date and all BTC was covered by us. IceCube's incident happened prior to August 22nd so it could not of been part of this attack. Also. The incident involving em202020 that IceCube brings up. This was involving a bug in our withdraw system where if you managed to confirm a withdrawal and cancel it at exactly the right time, the funds would both be sent via the blockchain to you and refunded to your account. No player accounts were affected as it was taken directly from the casino's balance. Em202020 did actually send most of the BTC back. He had spent some buying a BFL Jalapeño so we were about 3-4 BTC short I believe. These BTC were obviously covered by the casino and not removed from any players accounts. We have no reason and no evidence to believe that IceCube's account was breached on the server side. The only way the funds could of been withdrawn at this time was by someone having access to IceCube's Minecraft login details. This logical outcomes from this is that someone had access to his computer or that his Minecraft account info was stolen. We cannot cover a players losses in this circumstance. Any player could login, gamble their BTC away and then claim that it wasn't them that did the gambling. This would be disastrous for the casino. We sent IceCube a log of his accounts entire history, including all bets, logins, and deposits/withdrawals. In the end we know that a lot has happened in the Bitcoin world of services and it's up to you to make your own mind up about who you trust. We have been around for a long time now and plan to be here much longer.
|
|
|
|
fligen
Member
Offline
Activity: 102
Merit: 10
Crypto Pros
|
|
November 13, 2013, 06:38:59 AM |
|
BitVegas is a scam my wallet had .22 BTC in it and it was withdrawn D:
Happened in August 20 something (don't' recall exact date now, already gave up).. My minecraft account had a very strong password. I'm sure bitvegas is making things up, never even responded to me.
|
|
|
|
BitVegas
|
|
November 13, 2013, 06:41:38 AM |
|
BitVegas is a scam my wallet had .22 BTC in it and it was withdrawn D:
Happened in August 20 something (don't' recall exact date now, already gave up).. My minecraft account had a very strong password. I'm sure bitvegas is making things up, never even responded to me.
Hello. I do not recall being made aware of this issue? What was your Minecraft username and how did you try to contact us?
|
|
|
|
Tulak
Newbie
Offline
Activity: 56
Merit: 0
|
|
November 13, 2013, 08:11:36 AM |
|
Stop throwing dirt at bitvegas. If the Issue was really around August, why did you never bother to make a statement on this very forum?
|
|
|
|
icecube (OP)
|
|
November 13, 2013, 04:24:42 PM Last edit: November 13, 2013, 04:38:55 PM by icecube |
|
BitVegas is a scam my wallet had .22 BTC in it and it was withdrawn D:
Happened in August 20 something (don't' recall exact date now, already gave up).. My minecraft account had a very strong password. I'm sure bitvegas is making things up, never even responded to me.
Hello. I do not recall being made aware of this issue? What was your Minecraft username and how did you try to contact us? Haha, just pay up BitVegas. You will be forever known as a scammer if you don't BitVegas is a scam my wallet had .22 BTC in it and it was withdrawn D:
Happened in August 20 something (don't' recall exact date now, already gave up).. My minecraft account had a very strong password. I'm sure bitvegas is making things up, never even responded to me.
Yes, it took me forever to contact him about my issue. Please contact me for his information and I will gladly give you everything! Stop throwing dirt at bitvegas. If the Issue was really around August, why did you never bother to make a statement on this very forum?
He said he would take care of it. Obviously other users are having problems. The issue involving the spoofed packets used to login (linked above) was using a vulnerable CraftBukkit version that was patched in on September 4th (3 days before the hack). This was our biggest hack to date and all BTC was covered by us. IceCube's incident happened prior to August 22nd so it could not of been part of this attack. My issue happened before the attack. What is your problem? There have been a tremendous amount of your so called vulnerabilities and hackers appear to be WAY smarter than you. Obviously he was smart enough to only hack my account because I am the user who has deposited the most at BitVegas. Even the old version was vulnerable. You are not making sense. Good luck getting out of this one! I have all the proof I need.
|
|
|
|
icecube (OP)
|
|
November 13, 2013, 04:41:16 PM |
|
Hey everyone. This is an old issue that happened on August 22nd, 2013. IceCube claims that the BTC was stolen by the server (me). We only keep a limited amount of Bitcoins in the servers withdrawal hot wallet. This is for security on the chance we get hacked, we do not lose all of our funds. When we see the hot wallet is low, we refill it. Occasionally we get many large withdrawals while I am offline and the wallet runs dry. As soon as we notice this we top it up once again, but it does meant that withdrawals will not process until this is done. IceCube tried to withdraw and that the wallet was empty. What happened the next day was the funds were gambled and lost on the games. I received a message from IceCube saying his BTC was missing. I checked the logs and I saw IceCube's failed withdraw attempt (due to the wallet being empty). But during the time the BTC was gambled away our withdrawal hot wallet had over 15 BTC remaining it. So if an attacker gained access to IceCube's account they could of easily withdrawn it. It is true we have been hacked in the past. We are very open about when this happens. You can see the BitVegas hack here: http://www.reddit.com/r/Bitcoin/comments/1lx1y4/minecraft_casino_bitvegas_hacked_and_poker_alpha/And the BitAds.net hack here: https://bitcointalk.org/index.php?topic=267825.msg3528865#msg3528865The issue involving the spoofed packets used to login (linked above) was using a vulnerable CraftBukkit version that was patched in on September 4th (3 days before the hack). This was our biggest hack to date and all BTC was covered by us. IceCube's incident happened prior to August 22nd so it could not of been part of this attack. Also. The incident involving em202020 that IceCube brings up. This was involving a bug in our withdraw system where if you managed to confirm a withdrawal and cancel it at exactly the right time, the funds would both be sent via the blockchain to you and refunded to your account. No player accounts were affected as it was taken directly from the casino's balance. Em202020 did actually send most of the BTC back. He had spent some buying a BFL Jalapeño so we were about 3-4 BTC short I believe. These BTC were obviously covered by the casino and not removed from any players accounts. We have no reason and no evidence to believe that IceCube's account was breached on the server side. The only way the funds could of been withdrawn at this time was by someone having access to IceCube's Minecraft login details. This logical outcomes from this is that someone had access to his computer or that his Minecraft account info was stolen. We cannot cover a players losses in this circumstance. Any player could login, gamble their BTC away and then claim that it wasn't them that did the gambling. This would be disastrous for the casino. We sent IceCube a log of his accounts entire history, including all bets, logins, and deposits/withdrawals. In the end we know that a lot has happened in the Bitcoin world of services and it's up to you to make your own mind up about who you trust. We have been around for a long time now and plan to be here much longer. I have had five people PM me about your operations being a scam. I will also send them all the information.
|
|
|
|
BitVegas
|
|
November 14, 2013, 04:02:08 AM |
|
Yes, it took me forever to contact him about my issue. Please contact me for his information and I will gladly give you everything!
Your original message was sent to me via bitcointalk PM on: August 22, 2013, 03:27:43 AMMy reply was delivered: August 22, 2013, 04:02:49 PMHe said he would take care of it. Obviously other users are having problems.
No other users are having problems besides the "5" you speak of and the newest one from fligen in which I am yet to hear a response to. If any other users are having problems please let us know asap (please include your Minecraft username). My issue happened before the attack. What is your problem? There have been a tremendous amount of your so called vulnerabilities and hackers appear to be WAY smarter than you. Obviously he was smart enough to only hack my account because I am the user who has deposited the most at BitVegas. Even the old version was vulnerable. You are not making sense. Good luck getting out of this one! I have all the proof I need.
We have had some issues in the past, I wouldn't call 2 attacks a tremendous amount (3 including bitads). We have never before had a direct attack on a single users account. If it was an attacker that got access to the server, he could of withdrawn/gambled one of the many higher users balances, or even multiple users balances. Only yours was affected that day, and even though your balance could of been easily withdrawn, it was gambled away. We have had many high rollers, some in the 100s of BTC's in BitVegas. You were not considered a high roller at the time. None of them have ever had an issue. I am very sorry that we cannot come to a conclusion on this. I am sorry that this has upset you how it has. But unfortunately there is nothing on our end we can do. I hope in time you can come to see us as a trusted service.
|
|
|
|
icecube (OP)
|
|
November 14, 2013, 05:50:43 AM |
|
Yes, it took me forever to contact him about my issue. Please contact me for his information and I will gladly give you everything!
Your original message was sent to me via bitcointalk PM on: August 22, 2013, 03:27:43 AMMy reply was delivered: August 22, 2013, 04:02:49 PMHe said he would take care of it. Obviously other users are having problems.
No other users are having problems besides the "5" you speak of and the newest one from fligen in which I am yet to hear a response to. If any other users are having problems please let us know asap (please include your Minecraft username). My issue happened before the attack. What is your problem? There have been a tremendous amount of your so called vulnerabilities and hackers appear to be WAY smarter than you. Obviously he was smart enough to only hack my account because I am the user who has deposited the most at BitVegas. Even the old version was vulnerable. You are not making sense. Good luck getting out of this one! I have all the proof I need.
We have had some issues in the past, I wouldn't call 2 attacks a tremendous amount (3 including bitads). We have never before had a direct attack on a single users account. If it was an attacker that got access to the server, he could of withdrawn/gambled one of the many higher users balances, or even multiple users balances. Only yours was affected that day, and even though your balance could of been easily withdrawn, it was gambled away. We have had many high rollers, some in the 100s of BTC's in BitVegas. You were not considered a high roller at the time. None of them have ever had an issue. I am very sorry that we cannot come to a conclusion on this. I am sorry that this has upset you how it has. But unfortunately there is nothing on our end we can do. I hope in time you can come to see us as a trusted service. I have been trying to contact you on Skype with one of your staff members trying to get into contact with you also before this. I even added you, but still no response. Oh, so you're going to help other users and not me? That is a lie. There was no one with a higher balance than my account. I can check, you know. I will legally get all of my BTC back from you. I am guaranteed this by my investigation in BitVegas and your personal life. HaHaha. Too late to pretend I won't. Thanks!
|
|
|
|
BitVegas
|
|
November 14, 2013, 10:10:30 AM |
|
I have been trying to contact you on Skype with one of your staff members trying to get into contact with you also before this. I even added you, but still no response. Oh, so you're going to help other users and not me? That is a lie. There was no one with a higher balance than my account. I can check, you know.
I will legally get all of my BTC back from you. I am guaranteed this by my investigation in BitVegas and your personal life. HaHaha. Too late to pretend I won't. Thanks!
I see I accepted someone on skype by the name of "XCUBE" on august 20th, which I see is your account. You then first messaged me via skype on August 22nd. The same day we started communicating via PM. Yes, I will help any user with a problem. You claim that you know 5 other users that had funds stolen but I am yet to hear from any of them. I cannot help you any further with yours as there is nothing left to do. Many players had a larger balance, but that is irrelevant. Our biggest player (mLiberty) deposited 242 BTC. The funds will not be returned as there is no reason to do so.
|
|
|
|
Tulak
Newbie
Offline
Activity: 56
Merit: 0
|
|
November 14, 2013, 10:37:39 AM |
|
The plot thickens.
|
|
|
|
fligen
Member
Offline
Activity: 102
Merit: 10
Crypto Pros
|
|
November 14, 2013, 10:40:35 AM |
|
Many players had a larger balance, but that is irrelevant. Our biggest player (mLiberty) deposited 242 BTC.
Not only is this is months ago when btcusd was much lower, but mLiberty knows you personally and you have purchased Bitcoin from him. That doesn't count. It's like saying your mother gave your video game 10/10. I did some investigation early on due to my 0.22 BTC theft (obviously from murderscene), but can't be bothered anymore. Good luck. Look here, use the free trial (cancel afterwards, I've already used mine for previous investigations) http://www.domaintools.com/research/whois-history/?q=bitjes.us
|
|
|
|
|
BitVegas
|
|
November 14, 2013, 01:47:43 PM |
|
I'm sorry IceCube but unless you have something new to bring to the table. We consider this matter closed for the time being. As far as I can see this is nothing more than an attack on BitVegas's reputation. We see that you have begun mass messaging people about this. We are more than happy to undergo any investigation like the one mentioned above. Trust and reliability from our members is of upmost importance. It will help straighten everythign out. I did some investigation early on due to my 0.22 BTC theft (obviously from murderscene), but can't be bothered anymore. Good luck.
Like I said earlier I was never informed by this issuie. If you provide your Minecraft username I can check the logs to see when, where, and why this happened. How come this issue never came up until now?
|
|
|
|
|