Hey, OP found a bug on your casino but there’s literally no way to report it, No Discord, no security email or anything. Tried reaching out to support too but they couldn’t understand what the bug is or what to do with it. Is there any way to report security bugs to you guys?
Is the "bug" a serious one which could be exploited to steal money from the casino? Or is it a simple/minor bug? If it's a serious/major bug, then you probably should ask for someone in the casino's security department. You could get a bug bounty for that.
If it's merely a minor bug, you can post about it in the topic.
yep its not a minor bug, its 2 api side issues which let you bypass a protection the frontend is supposed to enforce, ill be sending OP the report shortly in PM hopefully he sends it to the right dev team. tbh i dont have much hope cuz the casino is white label and they might not have a sec team,
found similar bugs on AllStars before but they actually took action and implemented protection,
another casino was BetPanda and they too shutdown the entire API for now.
couldn't get hold of anyone from this casino's team tho so yea OP is basically the only way i can get the report to them
I believe that you probably should open a topic, make it self-moderated, and explain the bug, how to replicate it, explain how it affects the UX/the inconveniences, and your suggestions in how it could be fixed.
Do that because there could be more casinos that could be affected by it, no? It would be a good public service for the community.
