dungp3132
Member
Offline
Activity: 274
Merit: 26
|
|
March 20, 2019, 12:26:38 PM |
|
This situation is almost identical to what happened to PrimeDice several years ago: https://medium.com/@Stunna/breaking-the-house-63f1021a3e6dYou guys are lucky that you discovered the exploit so fast and lost only 3 BTC. PrimeDice lost 2,400+ BTC because of the infamous hack. I wish you best of luck with your investigation! Don't give a penny more to those disgusting buggers. But what happened with PrimeDice did not lead to dramatic lost (in fact nearly $1 mil. lost) due to low price of bitcoin at that year. The case of PrimeDice will turn to worse lost if it happened when bitcoin stood at $19k. Losts in early phase always bad because funds for developments, promotions, and more things lost for stupid things and bad guys.
|
|
|
|
examplens
Legendary
Offline
Activity: 3430
Merit: 3436
Crypto Swap Exchange
|
|
March 20, 2019, 01:27:54 PM |
|
This situation is almost identical to what happened to PrimeDice several years ago: https://medium.com/@Stunna/breaking-the-house-63f1021a3e6dYou guys are lucky that you discovered the exploit so fast and lost only 3 BTC. PrimeDice lost 2,400+ BTC because of the infamous hack. I wish you best of luck with your investigation! Don't give a penny more to those disgusting buggers. But what happened with PrimeDice did not lead to dramatic lost (in fact nearly $1 mil. lost) due to low price of bitcoin at that year. The case of PrimeDice will turn to worse lost if it happened when bitcoin stood at $19k. Losts in early phase always bad because funds for developments, promotions, and more things lost for stupid things and bad guys. There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.
|
|
|
|
Bitcoin Miners
Full Member
Offline
Activity: 440
Merit: 100
Roobet
|
|
March 20, 2019, 01:30:45 PM |
|
There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.
It is an expensive cost to find bugs for such very young dice site like WinDice. However, if all bugs found and problems fixed completely, and the site got significant real gamblers, bright future to come. I hope that the 3 BTC lost does not hurt the Windice site too much.
|
|
|
|
dark08
|
|
March 20, 2019, 01:40:05 PM |
|
Dear bitcointalk users! We encountered a problem: a critical bug was discovered that allowed some of the players to get access to the server seed. Unfortunately , the users didn't report the bug , but attempted to abuse it instead. Due to the fact that windice.io has instant withdrawals, our hot wallets were drained for over 3 bitcoins in total. After we detected a suspicious activity , we temporarily turned the withdrawals off and contacted one of the exploiters , who refused to return the coins obtained by the bug abuse and asked for a 1 bitcoin payment in exchange for cancelling his pending 2 bitcoin withdrawal and revealing the bug. Clearly violating our Terms and conditions (12.1) : https://windice.io/termsThe bug description: 1.Server seed (secret seed) is revealed after a player changes his server seed to a new one. 2. Windice has a function to change the client seed only , without changing the server seed. 3. After the client seed was changed , due to the bug , some of the players were able to see the server seed in their past bets since it was identical to the one from the previous session. We attach a video reproducing the bug: https://youtu.be/w0qb0GRbYmEDue to the aforementioned , we decided to reset the sessions and/or reset the balances of the players with the following nicknames: turok3012 luki348 Baxjniy108 Gcjeagq188 Vobhhdt101 stepan1983 drdavid58 notYou Pdkijoq141 Xgicyra161 Hexfdcj114 Joonaa March108 GatotKaca jsteffa boaler infsps Faris93 sanjaHimik RainBot divas1979 Oxiorxe133 kellyKole Grimuar Pechorin Timbdawg Vgafvcl139 Xsyahvo123 Ccsyusb119 nakamoto Hbkexrm154 Rtnkufo151
( not all of the accounts reset abused the bug ) At the moment we turned the option to change the client seed to a custom one off . Only randomizing of the client seed is possible. Payouts and deposits are paused for several hours until we investigate.All your deposits and balances are safe. We apologise for the inconvenience it caused. Windice.io team. Sorry for the lost team windice atleast you discovered fastly this abuser and lost only 3btc you made a fast moved team. I hate this abuser!!! It is possible to return the 3btc? Hoping for the success of your project after the lost!
|
|
|
|
yoloer808
Full Member
Offline
Activity: 288
Merit: 113
Web dev for hire
|
|
March 20, 2019, 02:55:36 PM |
|
Good job on catching this. The crook could have taken advantage of this slowly, draining you for more over a longer period. Some crooks are stupid.
Keep in mind tho that you need an alternative fix - if you do not allow client seed change, your site is not provably fair.
|
|
|
|
elmanchez
Full Member
Offline
Activity: 322
Merit: 143
away
|
|
March 20, 2019, 07:07:11 PM |
|
As I see, the site works during the day and it seems to me that this amount did not cause any special damage to the project.
Thanks again for the work of the Administrators. Hopefully next time scammers will suck a finger.
WINDICE.IO
|
|
|
|
DeadCoin
Sr. Member
Offline
Activity: 1246
Merit: 261
★ Investor | Trader | Promoter
|
|
March 20, 2019, 09:16:35 PM |
|
Seriously your pro-activeness should be appreciated even though it was bit late. This is what strengthens your market. Introducing a dice site is not so hard as of now but maintaining and sustaining it with safe and secure system is the challenging work. Upgrade your system as secure as possible. Good work. Keep it up.
|
|
|
|
examplens
Legendary
Offline
Activity: 3430
Merit: 3436
Crypto Swap Exchange
|
|
March 20, 2019, 09:34:30 PM |
|
There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.
It is an expensive cost to find bugs for such very young dice site like WinDice. However, if all bugs found and problems fixed completely, and the site got significant real gamblers, bright future to come. I hope that the 3 BTC lost does not hurt the Windice site too much. You are right, but that it happened after 6 months probably stolen amount would be bigger than 3BTC. Now they will be much more careful.
|
|
|
|
AmoreJaz
Legendary
Offline
Activity: 3248
Merit: 1103
Leading Crypto Sports Betting & Casino Platform
|
|
March 20, 2019, 09:55:25 PM |
|
If I got it right, some of abused withdrawals is still pending? What is actual site's loss? Sadly, yea, opinion of most players is smth like "What's point of bug reporting? They will pay me like 50$. Better to abuse it". But when same people accidentally gets victims of some scam, they are crying as loud as can, that it's not fair! Abusing found bug is same scamming actually... one good thing here is they can track who did abuse that bug because of their username. i hope no one from yahoo's sig campaign tried to get the funds that they dont own. else, i know whats gonna happen... a testament that many people are really dishonest and dont care about others welfare. There is a development bug. Now we can say, they paid 3BTC to find this bug. I hope it will not affect to future work of this casino.
It is an expensive cost to find bugs for such very young dice site like WinDice. However, if all bugs found and problems fixed completely, and the site got significant real gamblers, bright future to come. I hope that the 3 BTC lost does not hurt the Windice site too much. You are right, but that it happened after 6 months probably stolen amount would be bigger than 3BTC. Now they will be much more careful. good catch from the windice team. 3 BTC is already a lot of money for a starting gambling site. ive seen a recent site that his bankroll is empty and he has hard time filling that up. so yeah, that amount of BTC is already something...
|
..Stake.com.. | | | ▄████████████████████████████████████▄ ██ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ██ ▄████▄ ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██ ██████ ██ ██████████ ██ ██ ██████████ ██ ▀██▀ ██ ██ ██ ██████ ██ ██ ██ ██ ██ ██ ██████ ██ █████ ███ ██████ ██ ████▄ ██ ██ █████ ███ ████ ████ █████ ███ ████████ ██ ████ ████ ██████████ ████ ████ ████▀ ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██ ██ ▀▀▀▀▀▀▀▀▀▀ ██ ▀█████████▀ ▄████████████▄ ▀█████████▀ ▄▄▄▄▄▄▄▄▄▄▄▄███ ██ ██ ███▄▄▄▄▄▄▄▄▄▄▄▄ ██████████████████████████████████████████ | | | | | | ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▀▄ █▀▀█▀▄▄ █ █▀█ █ ▐ ▐▌ █ ▄██▄ █ ▌ █ █ ▄██████▄ █ ▌ ▐▌ █ ██████████ █ ▐ █ █ ▐██████████▌ █ ▐ ▐▌ █ ▀▀██████▀▀ █ ▌ █ █ ▄▄▄██▄▄▄ █ ▌▐▌ █ █▐ █ █ █▐▐▌ █ █▐█ ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█ | | | | | | ▄▄█████████▄▄ ▄██▀▀▀▀█████▀▀▀▀██▄ ▄█▀ ▐█▌ ▀█▄ ██ ▐█▌ ██ ████▄ ▄█████▄ ▄████ ████████▄███████████▄████████ ███▀ █████████████ ▀███ ██ ███████████ ██ ▀█▄ █████████ ▄█▀ ▀█▄ ▄██▀▀▀▀▀▀▀██▄ ▄▄▄█▀ ▀███████ ███████▀ ▀█████▄ ▄█████▀ ▀▀▀███▄▄▄███▀▀▀ | | | ..PLAY NOW.. |
|
|
|
windice (OP)
Copper Member
Jr. Member
Offline
Activity: 422
Merit: 5
🎲 windice.io ❤️
|
|
March 20, 2019, 10:07:21 PM |
|
Deposits are available. Withdrawals are instant Client Seed change function enabled.
The functionality is fully available and we are ready to work on!
WINDICE.io team
|
|
|
|
TimeTeller
|
|
March 20, 2019, 10:17:24 PM |
|
Deposits are available. Withdrawals are instant Client Seed change function enabled.
The functionality is fully available and we are ready to work on!
WINDICE.io team
Grreat to hear that Windice team acted fast on this problem and not losing so much. I hope people will be more helpful when it comes to situation like this and not abuse the system. And now, I understand the reason why I couldn't get in. I thought it was my net connection.
|
|
|
|
elmanchez
Full Member
Offline
Activity: 322
Merit: 143
away
|
|
March 20, 2019, 10:21:07 PM |
|
Deposits are available. Withdrawals are instant Client Seed change function enabled.
The functionality is fully available and we are ready to work on!
WINDICE.io team
I knew that it would not bring big losses! Thanks for your quick response and cold blood to scammers. From now on I will go to play on your favorite site. It is very good that you learn from the mistakes of other sites like PD. Respect for fast work. Good luck to your team WinDice.
|
|
|
|
Twinkledoe
Full Member
Offline
Activity: 1904
Merit: 138
★Bitvest.io★ Play Plinko or Invest!
|
|
March 20, 2019, 10:41:51 PM |
|
Deposits are available. Withdrawals are instant Client Seed change function enabled.
The functionality is fully available and we are ready to work on!
WINDICE.io team
I knew that it would not bring big losses! Thanks for your quick response and cold blood to scammers. From now on I will go to play on your favorite site. It is very good that you learn from the mistakes of other sites like PD. Respect for fast work. Good luck to your team WinDice.Big or small losses, it shows the fact that many people are driven by greed for money. No wonder you can see a scammer everywhere. But all ends well here. Hoping no more situations like this in the future.
|
|
|
|
boaler1
Newbie
Offline
Activity: 17
Merit: 0
|
|
March 20, 2019, 10:54:04 PM |
|
this list of nicknames suggests to others that these users have used the bug. What's the point? You want to ruin my reputation? I could also write something about the page, but others should experience it self. That is not a good behave in my opinion!
|
|
|
|
rhomelmabini
|
|
March 20, 2019, 11:00:42 PM |
|
Hoping those exploiters will faced whatever they want to face, abusing such seeds will be harmful not to them but also others that uses the platform. Good catch by the admins before it gets severe.
|
|
|
|
livingfree
|
|
March 20, 2019, 11:13:03 PM |
|
Hi everyone. Made a new account for this as I unfortunately used my real identity with my account on windice and dont want it associated with my bitcointalk account - so take this for what it is.
That being said, I would like to say a few words about this site and my experience. I decided to give it a spin - its fast, responsive and overall very well done. The security options are comprehensive and the chat allows for direct mesages - all features that I love.
I have managed to end up about 0.6btc in profit. Withdrawal was instant and, again, a very solid experience.
This seems like a site that will become on of the greats like PD. My two cents.
You won 0.6 BTC on this site? Color me surprised, was a bit skeptical about it, as a 'new' site pops up almost every week. Gonna keep an eye on this one. Just a few days ago. There is a guy who plays at that site. He played like a crazy. With just a small deposit he manage to gain 3-4 BTC and he don't want to quit playing. Because he thinks he's a god! Everyone on that day witness that event and knows what happens next... Lol What? I missed this guy on the chat box, I'm just staying on the chat box last time and probably missed this person. Congratulations on your wins KK1787! Deposits are available. Withdrawals are instant Client Seed change function enabled.
The functionality is fully available and we are ready to work on!
WINDICE.io team
I was away almost for this day and didn't noticed that there was a bug still good catch and you're really making windice great. Congrats team!
|
|
|
|
StephenJH
|
|
March 20, 2019, 11:14:28 PM |
|
Deposits are available. Withdrawals are instant Client Seed change function enabled.
The functionality is fully available and we are ready to work on!
WINDICE.io team
Congrats for making perfect gambling site with such features. Is it also possible to change the client seed after changing the server seed like in other gambling sites?
|
| ███████████████████████████ ███████████████████████████ ████████▀▀▄▄▄▄▄▄▄▀▀████████ ██████▀▄██▀▀▄▄ ████▄▀██████ █████ ███ ████ ▀▀████ █████ ████ █████ ███▀▀▀▄████ ████ ████ ███▀▀▀▄▄▄████████ ████ ████ ██▄▄▀▀███████▀▄▄█ ████ █████ █████ █▀██▀▄███ █████ ██████▄▀███▀▄█▀▄███▀▄██████ ████████▄▄▀▀▀ ▀▀▀▄▄████████ ██████████▀▄███████████████ █████████▄█████████████████ | . .FortuneJack. | │ | ▄█▄ █ ▄ ▄████▄▄ ▄▄▀▀██▄▄ ▄███ █▄██▄██████▄▄██████▄▄▄█████ █▄████████▌▀▄▄███▀▄▄▄▀▀██ ▄▀███████ █▄██▄██▄▄▄▄▀██▀ ▀▀▄▀███▀▀▄▄▀▀█▀▀█████▀▄ ████▄▀▀█▄▄▄▀▀▀▀▀▄███▄█ ▐▌▄█████▀ ▄▄▄█▄▄ ███ ▀█▄▀█▀▀▄ ████▀███▄▀ ▐▌█▄ ▄█▄█▀██▌ ▀▄ █▄████▀▀ ▄▄▄█▄ ▀▄▄█▀▄▄▄▀▀▀██▄▄██ ▀▀▄▄▄▄▄▄▀▀▀▀▀ | | | | . ▬▬▬▬▬▬▬▬ BY
HACKSAW G A M I N G | ▄▀▀▀▄ ▄▄▀▀███▄▄██▄▄ ▄█▀████████▄▀▀██▄ ▄▀▀▀▀▀▄█▄███████▐███▄ ██▀█████▄▀█▀▀▀▀███▀▀▐▌ █▄█▄██▀▄▄▄▄▄▄▄▀██▄██▐▌ ▐▀▀▄▀▀▀▀ ▀ ▀█▀████▀ ▀█▀ ▐▄▄▄▄▄▄ ▀ ▄▀██▄ █ ▄██████████▄ ▄██▄ ▐▌▀▀██████████████████ ▐▌ ▐ ▀▌ ▀ ▀██▀█▄█ ▀▄▀▄▄▄▄▄▄▄▄▄▄▄▀█▄▄▀▀ ▀▀▄▄█▀▀█▄▄▄▄█▀▀ | | | | ....OVER $2,000,000!.... ALREADY GIVEN AWAY IN LESS THAN 2 WEEKS | │ | . ....PLAY NOW.... | |
|
|
|
windice (OP)
Copper Member
Jr. Member
Offline
Activity: 422
Merit: 5
🎲 windice.io ❤️
|
|
March 20, 2019, 11:31:24 PM |
|
this list of nicknames suggests to others that these users have used the bug. What's the point? You want to ruin my reputation? I could also write something about the page, but others should experience it self. That is not a good behave in my opinion!
Hello ,boaler1. This is the list of people affected by the bug and whose sessions and (or) balances were reset , NOT of the users who abused the bug . You should contact our support team and we will check your account . If no suspicious patterns or activity found , we will restore your balances. Windice.io team.
|
|
|
|
dark08
|
|
March 21, 2019, 12:33:12 AM |
|
Quick action by the dev and team to fixed this bug good job for providing awesome online casino so this is the start to attract more player since we all know you can do a better and safety gambling site hoping this will run for long term.
|
|
|
|
yoloer808
Full Member
Offline
Activity: 288
Merit: 113
Web dev for hire
|
|
March 21, 2019, 05:27:43 AM |
|
Nice, glad you were able to overcome this. However, your provably fair system not is not really provably fair: you require the user to pre-commit to a client seed before you give him a new server seed hash. This means that, theoretically, you could serve him a server seed that will fit (or not fit) a specific betting pattern. You need to allow users to choose their client seed AFTER you have committed to a server seed.
|
|
|
|
|