FortuneJack has a problem in Dice game

[Haunebu]

The error is resolved. Please check the main post for the update

Well done op. You deserved the bug bounty for your effort in rectifying such a big issue. Usually, no one bothers with checking whether the mechanics are fine in such popular sites which is why FJ got away with this for so long.

I suppose we should also credit FJ for fixing this!

For fixing an age old issue finally pointed out by a random user? Lol. This one reason and many more complaints against them are the reason why I don't gamble on FJ and prefer other sites like Bitsler etc even though I absolutely love the UI and design of FortuneJack.

[1715211242]

1715211242

[1715211242]

1715211242

[1715211242]

1715211242

[1715211242]

1715211242

[1715211242]

1715211242

[efialtis]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

I was also given a bug bounty when i asked for it.
So i guess the case is closed. I will still keep it open for any further discussions and questions



So i was checking out the payout numbers in the Dice game of FortuneJack. I spotted something wrong

Normally in a dice rolls you have numbers between 0 to 99.99 resulting in a total of 10000 numbers.
But Fortunejack seems to be invalidating roll 00.00 making it only 9999 numbers. Even the FAQ section of their dice says "The roll numbers between 0 and 99.99 ..."

So i am going to take example of Primedice here

For a 2x payout

In primedice, we have Roll under 49.50 (0 to 49.49 giving 4950 numbers) and Roll over 50.49 (50.50 to 99.99 giving 4950 numbers)
In fortunejack, we have Roll under 49.50 (00.01 to 49.49 giving 4949 number) and Roll over 50.50 (50.51 to 99.99 giving 4949 numbers)

For a 990x payout

In primedice, we have Roll under 0.10 (0 to 0.09 giving 10 numbers) and Roll over 99.89 (99.90 to 99.99 giving 10 numbers)
In fortunejack, we have Roll under 0.10 (00.01 to 0.09 giving 9 numbers) and Roll over 99.90 (99.91 to 99.99 giving 9 numbers)

Fortunejack calls it 0.1% win chance but technically it's 0.09%


FortuneJack

If you bet 10 satoshi 9999 times (0 is not counted) at 990x payout on FJ, you are to lose 9990 times and win 9 times.
Total bet amount = 10 * 9999 = 99990 satoshi
Total Win amount = 9 * 9900 = 89100 satoshi
Total lose amount = 99990 - 89100 = 10890 satoshi

Total fee = 10890/99990 = 10.89 %

PrimeDice

If you bet 10 satoshi 10000 times at 990x payout on PD, you are to lose 9990 times and win 10 times
Total bet amount = 10 * 10000 = 100000 satoshi
Total win amount = 10 * 9900 = 99000 satoshi
Total lose amount = 100000 - 99000 = 1000 satoshi

Total fee = 1000/100000 = 1 %


I even asked FortuneJack about this issue this was their reply : https://imgur.com/a/W9Qwz9I


Edit : For a 10x payout the fee goes to 1.09% while they promise a house edge of 1%


Edit2 : It looks like they have had this problem since they started : https://www.youtube.com/watch?v=Slh4k8yM11o


Edit3: This is a 4 years old video on youtube which concerns this issue : https://www.youtube.com/watch?v=jwtLPWjVxYI
The guy is using 6x payout for Roll over 83.50 But it should actually be 83.49


Edit4: Update

It looks like their support guy wasn't looking very hard. Here are they apologizing about miscommunication : https://imgur.com/a/NAqLzrr
So 0 is counted. Of course i didn't just believe it but verified myself by running a script in the All bets page.

Now that we have 10000 possible numbers instead of 9999, We got a different problem
Fortunejack dice gives different Win chance for Roll under and Roll over.

For a 2x payout
In fortunejack, we have Roll under 49.50 (00.00 to 49.49 giving 4950 number) and Roll over 50.50 (50.51 to 99.99 giving 4949 numbers)

For a 990x payout
In fortunejack, we have Roll under 0.10 (00.00 to 0.09 giving 10 numbers) and Roll over 99.90 (99.91 to 99.99 giving 9 numbers)

So if i were to bet on FJ Dice, i would have a correct winning chance for Roll under but incorrect winning chance if i decided to go with Roll over
Not to mention the outrageous fee of up to 10.891% for Roll over

Here i am mentioning the concern : https://imgur.com/a/7xaFPtS
The issue is now under Investigation : https://imgur.com/a/rllgfZq

What boggles me is nobody care to notice this issue. FJ benefited from it for all these years and the users were mislead by an incorrect information.

Really a great job and thanks for reporting this even though I misunderstood you at first. Not often do new people arrive here and share such valuable information. I hope you keep it up and stay active in our forum, we need people like you! Well deserved bounty! =)

[FortuneJack]

Hi Dear Player,

I would like to publicly thank you for your dedication and for informing us over the issue. I hereby also confirm, that the issue has been solved from our side.

and btw, we have now started a bug bounty campaign on Tron's Integration to FortuneJack. If you or other members of community will be interested, you could also dig here too, will be greatly appreciated. You can read more here.

Again, thank you and wish you best of luck.

Cheers,
David.

[redsun114]

I was also given a bug bounty when i asked for it.
So i guess the case is closed. I will still keep it open for any further discussions and questions

That is actually such a nice thing to do by fortunejack with the bug bounty deed.

I mean they did had a problem, they didn't realize it or they didn't care because it was making them profit, then it got more public (you can see that they didn't care when support was helping but when it got to bitcointalk they cared, power of social media) and then people literally started to bug them about it and they fixed it, after fixing it and to make sure this topic gets a correction they gave OP some money or maybe they paid before the edit so that he would edit and show how it is fixed, if you pay OP he would edit and say it was fixed which would be easier than trying to open a new topic and show people it is fixed now, hence they paid the bug bounty, I doubt they would have otherwise.

[RHavar]

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

Given the way provably fair works, it should be relatively easy to go through all the old bets and award wins that were improperly graded as a loss (and notify people of the extra balance now in their account). I don't see how you could justify not doing it.

I wouldn't hold my breath though, I think they've always had a bit of a checkered past ... only doing the right thing if their feet were held to the fire.

[noormcs5]

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

I am sure this was not done deliberately and this bug has just been figured out. Obviously they cannot compensate the players for this but the good thing is that they have accepted it and will update it. Also the new bug bounty announced by fortune jack is yet another step towards transparency and good faith.

[panjul07]

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

I am sure this was not done deliberately and this bug has just been figured out. Obviously they cannot compensate the players for this but the good thing is that they have accepted it and will update it. Also the new bug bounty announced by fortune jack is yet another step towards transparency and good faith.

They can if they wish to do it, there must be a full history of bets made at Fortunejack so they can give some compensation for those who were affected. Obviously as what is said by Stunna, it might be difficult and take a lot of time but I believe it can be checked. The amount of win bets that graded as lose bets can be a huge amount since its been many years already, lets see what Fortunejack is going to do to deal with this. IMO, giving bug bounty for those who find this bug is not enough because the affected players deserves to get their money back if they lost some money due to this bug.

[Yatsan]

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

I am sure this was not done deliberately and this bug has just been figured out. Obviously they cannot compensate the players for this but the good thing is that they have accepted it and will update it. Also the new bug bounty announced by fortune jack is yet another step towards transparency and good faith.

They can if they wish to do it, there must be a full history of bets made at Fortunejack so they can give some compensation for those who were affected. Obviously as what is said by Stunna, it might be difficult and take a lot of time but I believe it can be checked. The amount of win bets that graded as lose bets can be a huge amount since its been many years already, lets see what Fortunejack is going to do to deal with this. IMO, giving bug bounty for those who find this bug is not enough because the affected players deserves to get their money back if they lost some money due to this bug.

Yes they can if they want to really give meaning on "Provably Fair". They have tracks on record for each player, I know they can trace who encountered this bug on their dice game. Compensation for players are needed since they weren't aware of this, small or big bettors, they deserve to be treated with fairness. We get it, house always wins but the fact that there is a chance to win is undeniable.

[Zicadis]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

[docthusinh]

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

I am more on "I/they/we don't care, since I/they/we did not urge to play on the site". I personally realized that after few minutes playing around with the site when I was seeking for sites 3 plus months ago, and then go away/ never turning back with simple thought that "it favour the house".

The key thing for them on Dice game is Min Bet vs Max Win range is too low to let a dice bot play for long enough rather than 0.49 vs 0.50 thing.

[EdenHazard]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

Naa ahhh , this gonna be a long journey for them to completely reimburse everyone who affected since this bug indicated was there since day one.

Wondering how much fortunejack pay op for this finding ....   a long time ago I reported similar technical problems and received my bug rewards quite huge. At op case level it must be super huge rewards   . PM me op if you wonder how much I've got. I'll tell you mine.

However sometimes if you didn't ask for the bounty rewards.. you'll be considered help them voluntarily which I hated that part unfortunately.

[Mahanton]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

Naa ahhh , this gonna be a long journey for them to completely reimburse everyone who affected since this bug indicated was there since day one.

Wondering how much fortunejack pay op for this finding ....   a long time ago I reported similar technical problems and received my bug rewards quite huge. At op case level it must be super huge rewards   . PM me op if you wonder how much I've got. I'll tell you mine.

However sometimes if you didn't ask for the bounty rewards.. you'll be considered help them voluntarily which I hated that part unfortunately.

For sites like Fortunejack there would really be a bounty bug for this one yet the level of technical problem is quite high so its expected to be high too.
If you arent caring too much on what did you find out then you would end up something like that same as you said.It is worthy to get up some rewards with
these finds arent that basic ones that a simple joe can find on.

[dicetest]

I suppose we should also credit FJ for fixing this!

Not really. They should be credited when they reimburse the players.

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

Exactly. And i don't think it would take more than few hours to figure out which roll numbers were incorrectly treated as loss
They just need to loop through all the bets and check whether the side is Roll Over and Game === roll number.

Since there are 11.2 Billion rolls history. The amount of incorrectly treated rolls would be somewhere 448K considering 40% of the rolls were "Roll over"
Though i would love to hear some stats from your side

I was also given a bug bounty when i asked for it.
So i guess the case is closed. I will still keep it open for any further discussions and questions

That is actually such a nice thing to do by fortunejack with the bug bounty deed.

I wasn't offered any bug bounty when the issue was resolved. I had to ask for it. So they offered 0.02 btc for years long bug
Had to complain about the amount offered for such huge bug, so they offered 0.1 btc which i was to either accept or reject

I am sure this was not done deliberately and this bug has just been figured out. Obviously they cannot compensate the players for this but the good thing is that they have accepted it and will update it. Also the new bug bounty announced by fortune jack is yet another step towards transparency and good faith.

Whether it was done deliberately or overlooked, this is the subject we can only speculate about though the bug is really silly hence never found
Crediting the users back would be pretty darn easy. They would only need to credit about half a million rolls. Not a big deal for a dice game

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

I was about to ask this question to FJ when the issue was resolved but then i found few more bugs which showed signs of an exploit but ended up being just visual bugs and nothing serious

Naa ahhh , this gonna be a long journey for them to completely reimburse everyone who affected since this bug indicated was there since day one.

Wondering how much fortunejack pay op for this finding ....   a long time ago I reported similar technical problems and received my bug rewards quite huge. At op case level it must be super huge rewards   . PM me op if you wonder how much I've got. I'll tell you mine.

However sometimes if you didn't ask for the bounty rewards.. you'll be considered help them voluntarily which I hated that part unfortunately.

Not really that long. Just few hours to figure out the rolls effected and additional few hours to reimburse the effected players
And i got only 0.1 btc for the bug bounty. Would love to know how much you were awarded

For sites like Fortunejack there would really be a bounty bug for this one yet the level of technical problem is quite high so its expected to be high too.
If you arent caring too much on what did you find out then you would end up something like that same as you said.It is worthy to get up some rewards with
these finds arent that basic ones that a simple joe can find on.

Thought so. Didn't have much option at the end. I was supposed to either accept or reject an offer of 0.1 btc

[noormcs5]

It's pretty nuts that nobody noticed this even though it was a persistent issue for years. I'm curious to see how much extra Fortunejack made from this and what they will do to reimburse the effected players. Given that this issue dates back years it will be extremely difficult to even figure out who was effected and to what degree, but given this level of error they should really spend some time to get this right.

I am sure this was not done deliberately and this bug has just been figured out. Obviously they cannot compensate the players for this but the good thing is that they have accepted it and will update it. Also the new bug bounty announced by fortune jack is yet another step towards transparency and good faith.

They can if they wish to do it, there must be a full history of bets made at Fortunejack so they can give some compensation for those who were affected. Obviously as what is said by Stunna, it might be difficult and take a lot of time but I believe it can be checked. The amount of win bets that graded as lose bets can be a huge amount since its been many years already, lets see what Fortunejack is going to do to deal with this. IMO, giving bug bounty for those who find this bug is not enough because the affected players deserves to get their money back if they lost some money due to this bug.

Maybe they can, i think it will be asking too much from them. There may be players who played and left and no longer play on the sites. This will be a huge amount of effort to calculate all the bets and figure out the correct amount.
My opinion is to leave the past but for the future, good thing is that no further players can be affected by it.

[dicetest]

Maybe they can, i think it will be asking too much from them. There may be players who played and left and no longer play on the sites. This will be a huge amount of effort to calculate all the bets and figure out the correct amount.
My opinion is to leave the past but for the future, good thing is that no further players can be affected by it.

That's absurd. Maybe you should put some time reading what i wrote on my previous post. It wouldn't be that hard to calculate the effected rolls and players
Though less than half of the refund money will ever be withdrawn

[Yatsan]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

Naa ahhh , this gonna be a long journey for them to completely reimburse everyone who affected since this bug indicated was there since day one.

Wondering how much fortunejack pay op for this finding ....   a long time ago I reported similar technical problems and received my bug rewards quite huge. At op case level it must be super huge rewards   . PM me op if you wonder how much I've got. I'll tell you mine.

However sometimes if you didn't ask for the bounty rewards.. you'll be considered help them voluntarily which I hated that part unfortunately.

For sites like Fortunejack there would really be a bounty bug for this one yet the level of technical problem is quite high so its expected to be high too.
If you arent caring too much on what did you find out then you would end up something like that same as you said.It is worthy to get up some rewards with
these finds arent that basic ones that a simple joe can find on.

Even big names have this bugs on their websites because they are upgrading and updating on what's inside. I'm wondering what would a bug bounty hunter does though I'm pretty sure they are testing everything so they could find bugs cause it's pretty obvious but I'm still curious. Does the platform provide what they need? like funds? computer? or they are just ordinary people hired to play and report encountered bugs?

[Spaffin]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

Naa ahhh , this gonna be a long journey for them to completely reimburse everyone who affected since this bug indicated was there since day one.

Wondering how much fortunejack pay op for this finding ....   a long time ago I reported similar technical problems and received my bug rewards quite huge. At op case level it must be super huge rewards   . PM me op if you wonder how much I've got. I'll tell you mine.

However sometimes if you didn't ask for the bounty rewards.. you'll be considered help them voluntarily which I hated that part unfortunately.

For sites like Fortunejack there would really be a bounty bug for this one yet the level of technical problem is quite high so its expected to be high too.
If you arent caring too much on what did you find out then you would end up something like that same as you said.It is worthy to get up some rewards with
these finds arent that basic ones that a simple joe can find on.

Even big names have this bugs on their websites because they are upgrading and updating on what's inside. I'm wondering what would a bug bounty hunter does though I'm pretty sure they are testing everything so they could find bugs cause it's pretty obvious but I'm still curious. Does the platform provide what they need? like funds? computer? or they are just ordinary people hired to play and report encountered bugs?

I believe that it is not necessary to look for some special topic on bitcointalk to deal with issues of finding vulnerabilities of a particular resource.  I think that the user, on his own initiative, can find some problems and directly contact the administration.  In any case, if the mistakes are serious, then the person will definitely be rewarded for this.  I have confidence only that only a decent team is able to evaluate the work of an attentive and professional person.
But in the fortunejack relationship, I am very surprised that this famous portal has been working since 2014 and still some problems still occur.

[Stunna]

Hi Dear Player,

I would like to publicly thank you for your dedication and for informing us over the issue. I hereby also confirm, that the issue has been solved from our side.

and btw, we have now started a bug bounty campaign on Tron's Integration to FortuneJack. If you or other members of community will be interested, you could also dig here too, will be greatly appreciated. You can read more here.

Again, thank you and wish you best of luck.

Cheers,
David.

I mean has the issue really been solved? You have profited off this for years at the expense of your players, is there going to be any responsibility taken for this?

[jpcfan]

just send  payback  to my account


thanks.


cryptobet 

[Mahanton]

Edit 5: Final update

The issue was recognized by the Fortunejack yesterday. Today around 11:45 UTC a new update was pushed
Hence the off-by-one error resolved.
Screenshot of the confirmation: https://imgur.com/a/mgH5Pzo
I checked the roll numbers and everything looks perfect.

Some high volume players could have been seriously adversely affected by this.

Has Fortunejack mentioned how they plan to reimburse anybody that has had their money stolen in this way?

Naa ahhh , this gonna be a long journey for them to completely reimburse everyone who affected since this bug indicated was there since day one.

Wondering how much fortunejack pay op for this finding ....   a long time ago I reported similar technical problems and received my bug rewards quite huge. At op case level it must be super huge rewards   . PM me op if you wonder how much I've got. I'll tell you mine.

However sometimes if you didn't ask for the bounty rewards.. you'll be considered help them voluntarily which I hated that part unfortunately.

For sites like Fortunejack there would really be a bounty bug for this one yet the level of technical problem is quite high so its expected to be high too.
If you arent caring too much on what did you find out then you would end up something like that same as you said.It is worthy to get up some rewards with
these finds arent that basic ones that a simple joe can find on.

Even big names have this bugs on their websites because they are upgrading and updating on what's inside. I'm wondering what would a bug bounty hunter does though I'm pretty sure they are testing everything so they could find bugs cause it's pretty obvious but I'm still curious. Does the platform provide what they need? like funds? computer? or they are just ordinary people hired to play and report encountered bugs?

I believe that it is not necessary to look for some special topic on bitcointalk to deal with issues of finding vulnerabilities of a particular resource.  I think that the user, on his own initiative, can find some problems and directly contact the administration.  In any case, if the mistakes are serious, then the person will definitely be rewarded for this.  I have confidence only that only a decent team is able to evaluate the work of an attentive and professional person.
But in the fortunejack relationship, I am very surprised that this famous portal has been working since 2014 and still some problems still occur.

Websites doesnt provide those needs yet as being said this would pertain about typical persons that do play or even just observing on the site and with their
own initiative they can able to spot it out but i would say the level of bug would vary on someones level of programming skills because they can analyze and detect
which isnt right compared to those zero knowledge specially if someone do had coding skills then bug bounty hunting would fit you out.

Since this thread is being answered by FJ representative and already got cleared, maybe its time to lock this thread/topic?