♨️🎲 WINDICE.io 🎲 Contests 🏆 TvT 🔰 Progressive Faucet💰 Jackpots 🎁❤

[dungp3132]

This situation is almost identical to what happened to PrimeDice several years ago:

https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d

You guys are lucky that you discovered the exploit so fast and lost only 3 BTC. PrimeDice lost 2,400+ BTC because of the infamous hack.

I wish you best of luck with your investigation! Don't give a penny more to those disgusting buggers.

But what happened with PrimeDice did not lead to dramatic lost (in fact nearly $1 mil. lost) due to low price of bitcoin at that year.
The case of PrimeDice will turn to worse lost if it happened when bitcoin stood at $19k.
Losts in early phase always bad because funds for developments, promotions, and more things lost for stupid things and bad guys.

[examplens]

This situation is almost identical to what happened to PrimeDice several years ago:

https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d

You guys are lucky that you discovered the exploit so fast and lost only 3 BTC. PrimeDice lost 2,400+ BTC because of the infamous hack.

I wish you best of luck with your investigation! Don't give a penny more to those disgusting buggers.

But what happened with PrimeDice did not lead to dramatic lost (in fact nearly $1 mil. lost) due to low price of bitcoin at that year.
The case of PrimeDice will turn to worse lost if it happened when bitcoin stood at $19k.
Losts in early phase always bad because funds for developments, promotions, and more things lost for stupid things and bad guys.

There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.

[Bitcoin Miners]

There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.

It is an expensive cost to find bugs for such very young dice site like WinDice.
However, if all bugs found and problems fixed completely, and the site got significant real gamblers, bright future to come.
I hope that the 3 BTC lost does not hurt the Windice site too much.

[dark08]

Dear bitcointalk users!
We encountered a problem: a critical bug was discovered that allowed some of the players to get access to the server seed.
Unfortunately , the users didn't report the bug , but attempted to abuse it instead. Due to the fact that windice.io has instant withdrawals,  our hot wallets were drained for over 3 bitcoins in total.
After we detected a suspicious activity , we temporarily turned the withdrawals off and contacted one of the exploiters , who refused to return the coins obtained by the  bug abuse
and asked for a 1 bitcoin payment in exchange for cancelling his  pending 2 bitcoin withdrawal and revealing the bug.
Clearly violating our Terms and conditions (12.1) : https://windice.io/terms
The bug description: 1.Server seed (secret seed) is revealed after a player changes his server seed to a new one.
2. Windice has a function to change the client seed only , without changing the server seed.
3. After the client seed was  changed , due to the bug , some of the players were able to see the server seed in their past bets since it was identical to the one from the previous session.
We attach a video reproducing the bug: https://youtu.be/w0qb0GRbYmE

Due to the aforementioned , we decided to reset the sessions and/or reset the balances of the players with the following nicknames:

Code:

turok3012
luki348
Baxjniy108
Gcjeagq188
Vobhhdt101
stepan1983
drdavid58
notYou
Pdkijoq141
Xgicyra161
Hexfdcj114
Joonaa
March108
GatotKaca
jsteffa
boaler
infsps
Faris93
sanjaHimik
RainBot
divas1979
Oxiorxe133
kellyKole
Grimuar
Pechorin
Timbdawg
Vgafvcl139
Xsyahvo123
Ccsyusb119
nakamoto
Hbkexrm154
Rtnkufo151

( not all of the accounts reset abused the bug )


At the moment we turned the option to change the client seed to a custom one off . Only randomizing of the client seed is possible.
Payouts and deposits are paused for  several hours until we investigate.All your deposits and balances are safe.
We apologise for the inconvenience it caused.

Windice.io team.

Sorry for the lost team windice  atleast you discovered fastly this abuser and lost only 3btc you made a fast moved team. I hate this abuser!!! It is possible to return the 3btc? Hoping for the success of your project after the lost!

[yoloer808]

Good job on catching this. The crook could have taken advantage of this slowly, draining you for more over a longer period. Some crooks are stupid.

Keep in mind tho that you need an alternative fix - if you do not allow client seed change, your site is not provably fair.

[elmanchez]

As I see, the site works during the day and it seems to me that this amount did not cause any special damage to the project.

Thanks again for the work of the Administrators. Hopefully next time scammers will suck a finger.
















WINDICE.IO

[DeadCoin]

Seriously your pro-activeness should be appreciated even though it was bit late. This is what strengthens your market. Introducing a dice site is not so hard as of now but maintaining and sustaining it with safe and secure system is the challenging work. Upgrade your system as secure as possible. Good work. Keep it up.

[examplens]

There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.

It is an expensive cost to find bugs for such very young dice site like WinDice.
However, if all bugs found and problems fixed completely, and the site got significant real gamblers, bright future to come.
I hope that the 3 BTC lost does not hurt the Windice site too much.

You are right, but that it happened after 6 months probably stolen amount would be bigger than 3BTC. Now they will be much more careful.

[AmoreJaz]

If I got it right, some of abused withdrawals is still pending? What is actual site's loss?

Sadly, yea, opinion of most players is smth like "What's point of bug reporting? They will pay me like 50$. Better to abuse it". But when same people accidentally gets victims of some scam, they are crying as loud as can, that it's not fair! Abusing found bug is same scamming actually...

one good thing here is they can track who did abuse that bug because of their username.
 i hope no one from yahoo's sig campaign tried to get the funds that they dont own. else, i know whats gonna happen...
a testament that many people are really dishonest and dont care about others welfare.

There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.

It is an expensive cost to find bugs for such very young dice site like WinDice.
However, if all bugs found and problems fixed completely, and the site got significant real gamblers, bright future to come.
I hope that the 3 BTC lost does not hurt the Windice site too much.

You are right, but that it happened after 6 months probably stolen amount would be bigger than 3BTC. Now they will be much more careful.

good catch from the windice team. 3BTC is already a lot of money for a starting gambling site.
ive seen a recent site that his bankroll is empty and he has hard time filling that up. so yeah, that amount of BTC is already something...

[windice]

Deposits are available.
Withdrawals are instant
Client Seed change function enabled.

The functionality is fully available and we are ready to work on!

WINDICE.io team

[TimeTeller]

Deposits are available.
Withdrawals are instant
Client Seed change function enabled.

The functionality is fully available and we are ready to work on!

WINDICE.io team

Grreat to hear that Windice team acted fast on this problem and not losing so much.
I hope people will be more helpful when it comes to situation like this and not abuse the system.
And now, I understand the reason why I couldn't get in. I thought it was my net connection.

[elmanchez]

Deposits are available.
Withdrawals are instant
Client Seed change function enabled.

The functionality is fully available and we are ready to work on!

WINDICE.io team

I knew that it would not bring big losses!
Thanks for your quick response and cold blood to scammers.
From now on I will go to play on your favorite site.

It is very good that you learn from the mistakes of other sites like PD.
Respect for fast work. Good luck to your team WinDice.

[Twinkledoe]

Deposits are available.
Withdrawals are instant
Client Seed change function enabled.

The functionality is fully available and we are ready to work on!

WINDICE.io team

I knew that it would not bring big losses!
Thanks for your quick response and cold blood to scammers.
From now on I will go to play on your favorite site.

It is very good that you learn from the mistakes of other sites like PD.
Respect for fast work. Good luck to your team WinDice.

Big or small losses, it shows the fact that many people are driven by greed for money. No wonder you can see a scammer everywhere. But all ends well here. Hoping no more situations like this in the future.

[boaler1]

this list of nicknames suggests to others that these users have used the bug.
What's the point?
You want to ruin my reputation?
I could also write something about the page, but others should experience it self.
 
That is not a good behave in my opinion!

[rhomelmabini]

Hoping those exploiters will faced whatever they want to face, abusing such seeds will be harmful not to them but also others that uses the platform. Good catch by the admins before it gets severe.

[livingfree]

Hi everyone. Made a new account for this as I unfortunately used my real identity with my account on windice and dont want it associated with my bitcointalk account - so take this for what it is.

That being said, I would like to say a few words about this site and my experience. I decided to give it a spin - its fast, responsive and overall very well done. The security options are comprehensive and the chat allows for direct mesages - all features that I love.

I have managed to end up about  0.6btc in profit. Withdrawal was instant and, again, a very solid experience.

This seems like a site that will become on of the greats like PD. My two cents.

You won 0.6 BTC on this site? Color me surprised, was a bit skeptical about it, as a 'new' site pops up almost every week. Gonna keep an eye on this one.

Just a few days ago. There is a guy who plays at that site. He played like a crazy. With just a small deposit he manage to gain 3-4 BTC and he don't want to quit playing. Because he thinks he's a god! Everyone on that day witness that event and knows what happens next... Lol

What? I missed this guy on the chat box, I'm just staying on the chat box last time and probably missed this person.

Congratulations on your wins KK1787!

Deposits are available.
Withdrawals are instant
Client Seed change function enabled.

The functionality is fully available and we are ready to work on!

WINDICE.io team

I was away almost for this day and didn't noticed that there was a bug still good catch and you're really making windice great. Congrats team!

[StephenJH]

Deposits are available.
Withdrawals are instant
Client Seed change function enabled.

The functionality is fully available and we are ready to work on!

WINDICE.io team

Congrats for making perfect gambling site with such features. Is it also possible to change the client seed after changing the server seed like in other gambling sites?

[windice]

this list of nicknames suggests to others that these users have used the bug.
What's the point?
You want to ruin my reputation?
I could also write something about the page, but others should experience it self.
 
That is not a good behave in my opinion!

Hello ,boaler1.
This is the list of people affected by the bug and whose sessions and (or) balances were reset , NOT of the users who abused the bug .
You should contact our support team and  we will check your account . If no suspicious patterns or activity found , we will restore your balances.

Windice.io team.

[dark08]

Quick action by the dev and team to fixed this bug good job for providing awesome online casino so this is the start to attract more player since we all know you can do a better and safety gambling site hoping this will run for long term.

[yoloer808]

Nice, glad you were able to overcome this. However, your provably fair system not is not really provably fair: you require the user to pre-commit to a client seed before you give him a new server seed hash. This means that, theoretically, you could serve him a server seed that will fit (or not fit) a specific betting pattern. You need to allow users to choose their client seed AFTER you have committed to a server seed.