Vulnerabilities in gambling websites in past

[Peanutswar]

Found a vulnerability in one of the providers, tried to contact them to tell them the information that they missed one important point in the new slot. But they are not even in a hurry to answer me, although the provider is on many major sites.
Of course, I saw a lot, but I have not seen such indifference yet)

Yes, they may not answer you at all. 
Many times I faced disgusting support work on different sites.  Including with his provider corresponded.  In the end, I solved the problem, but the support staff tortured my entire nervous system with their idiotic demands. 

If we talk about using email, then you definitely need to have several addresses, not even 2-3, but more.  All sorts of things happen in life.  But the ability to write letters and send them to the addressee should always be reserved.  Otherwise, at the right time, unexpected troubles can happen.  And of course, the addresses should be not only on Gmail or Yahoo, but also on alternative ones like mail.com, yandex.com and others

If this bug is related to the visual or into the front end they didn't take too much for this, but if the bug is related to the functionality of the deposits and withdrawal they make an immediately action to fix this because there's a possibility of data breaches and abusing of the transaction might cause crashing the system itself and abuse the system.

[maestro20]

Found a vulnerability in one of the providers, tried to contact them to tell them the information that they missed one important point in the new slot. But they are not even in a hurry to answer me, although the provider is on many major sites.
Of course, I saw a lot, but I have not seen such indifference yet)

Yes, they may not answer you at all. 
Many times I faced disgusting support work on different sites.  Including with his provider corresponded.  In the end, I solved the problem, but the support staff tortured my entire nervous system with their idiotic demands. 

If we talk about using email, then you definitely need to have several addresses, not even 2-3, but more.  All sorts of things happen in life.  But the ability to write letters and send them to the addressee should always be reserved.  Otherwise, at the right time, unexpected troubles can happen.  And of course, the addresses should be not only on Gmail or Yahoo, but also on alternative ones like mail.com, yandex.com and others

If this bug is related to the visual or into the front end they didn't take too much for this, but if the bug is related to the functionality of the deposits and withdrawal they make an immediately action to fix this because there's a possibility of data breaches and abusing of the transaction might cause crashing the system itself and abuse the system.

No, it's definitely not a visual bug. I'm not exactly an expert in this matter. they have a problem with buying a bowl game, you can pay less than what the system asks to do. and this will clearly affect the RTP of the slot itself with a long distance.

[BitcoinAccepted]

Weaknesses will, of course, always remain in gambling sites. You are always left with the problem that you can try to cheat to place a camera. Whether fixed competitions can do, you can't do much about that in advance. There will always be dishonest players who don't want to gamble but want to cash in for free. All you can do is block accounts. There can also be a problem during maintenance, but if you are with a large Igaming provider, you should not be bothered by this. Teams work day and night to keep an eye on everything.

[khaled0111]

No, it's definitely not a visual bug. I'm not exactly an expert in this matter. they have a problem with buying a bowl game, you can pay less than what the system asks to do. and this will clearly affect the RTP of the slot itself with a long distance.

This seems like a critical vulnerability! Any decent game provider (or any developer in general) is supposed to give your report the highest priority and will try to fix the bug or patch the vulnerability as soon as they know about its existence since it may result in severe financial loss for their customers (casinos).
I suppose those game providers get tons of emails every single day (many of them are spam) so make sure to send them a detailed report with a PoC to explain how the vulnerability you found can be exploited and its impact.
Instead of ignoring your messages, they should give you a reward.

[stomachgrowls]

Weaknesses will, of course, always remain in gambling sites. You are always left with the problem that you can try to cheat to place a camera. Whether fixed competitions can do, you can't do much about that in advance. There will always be dishonest players who don't want to gamble but want to cash in for free. All you can do is block accounts. There can also be a problem during maintenance, but if you are with a large Igaming provider, you should not be bothered by this. Teams work day and night to keep an eye on everything.

For a gambling business then its understandable that you would really be working hard or really putting up some emphasis when it come to security since we know that this is a huge capital kind of venture

which means that it would really be just understandable or just right that you would really be taking care off on this particular division if you dont like to mess up via committing those huge losses due to
errors and issues in terms of those exploits which it can be potentially be abused if they had able to find out.

There's no such thing about perfect system or 100% secure but doesnt mean that you wont really be trying your best on enhancing it no matter what.

[sensimilia]

You are right, but mostly they will say that they have legal terms and say that they will not be sharing it with others. This is only for their own consumption, but still it manages to leak. This is really the problem now, but in order to signup and play on a gambling website, you really need to do KYC, and now I noticed that privacy is not that important to others since they don't care where they are sending their personal information. The only thing that we are like holding right now is really they terms and conditions about our data to make sure our information are safe

I never believed that they share our data and we start getting the ads dependent on our likes and interest. I noticed that real soon that I get the ads depended on likes and interest. For the moment I have deactivated my fb and insta accounts. To have some peace of mind.

Well you cannot really escape from the world of targeted advertising, no matter where you go in this world. Even in nature there are examples of advertisement. Or at least a kind of advertisement. A good smelling fruit is appealing to animals, animals eat the fruit, poop out the seeds. Their poop becomes the seedlings fertilizer. So obviously this is a good trade.


But as far as the human world goes: I think advertisement is also good but sometimes we overdo it. We go too far. We start annoying people.

Thats the worst part. The annoyance from bad advertising practices.

No matter what the income, it's not okay to overdo it or overdo it, but it's best to keep a cool head, so if a player doesn't like to go to the base stage, they have the right to have a later experience with each player at each level.  At this time.

[virasisog]

Weaknesses will, of course, always remain in gambling sites. You are always left with the problem that you can try to cheat to place a camera. Whether fixed competitions can do, you can't do much about that in advance. There will always be dishonest players who don't want to gamble but want to cash in for free. All you can do is block accounts. There can also be a problem during maintenance, but if you are with a large Igaming provider, you should not be bothered by this. Teams work day and night to keep an eye on everything.

Lapses and vulnerability still exist even these days. Even reputable casino sites have their weakness but it's a good thing that they don't allow issues to ruin their reputation so they fix the problem right away. That's why it's important to choose high reputable casino sites because they have the most active support team to solve our queries.

[Hamphser]

Weaknesses will, of course, always remain in gambling sites. You are always left with the problem that you can try to cheat to place a camera. Whether fixed competitions can do, you can't do much about that in advance. There will always be dishonest players who don't want to gamble but want to cash in for free. All you can do is block accounts. There can also be a problem during maintenance, but if you are with a large Igaming provider, you should not be bothered by this. Teams work day and night to keep an eye on everything.

Lapses and vulnerability still exist even these days. Even reputable casino sites have their weakness but it's a good thing that they don't allow issues to ruin their reputation so they fix the problem right away. That's why it's important to choose high reputable casino sites because they have the most active support team to solve our queries.

On any business then it would really be crucial on letting security issues to become big because that would surely cost their reputation which is something not good for the business.
Its normal that they would really be minding on fixing everything as much as they could so that loyal users wont be jumping because of freaking out or being afraid for them to lose
money too.Whenever fairness issues arise and same goes with withdrawal or deposit issues is something that needs to be fixed right away.

[Peanutswar]

No, it's definitely not a visual bug. I'm not exactly an expert in this matter. they have a problem with buying a bowl game, you can pay less than what the system asks to do. and this will clearly affect the RTP of the slot itself with a long distance.

This seems like a critical vulnerability! Any decent game provider (or any developer in general) is supposed to give your report the highest priority and will try to fix the bug or patch the vulnerability as soon as they know about its existence since it may result in severe financial loss for their customers (casinos).
I suppose those game providers get tons of emails every single day (many of them are spam) so make sure to send them a detailed report with a PoC to explain how the vulnerability you found can be exploited and its impact.
Instead of ignoring your messages, they should give you a reward.

I guess this need to make an action by the gambling platform immediately because this is a crucial related to their transactions it might affect the sales and if the people see this kind of bug they will take an abuse and make an easy money. Do you have a response to the team already?.

[ethereumhunter]

I guess this need to make an action by the gambling platform immediately because this is a crucial related to their transactions it might affect the sales and if the people see this kind of bug they will take an abuse and make an easy money.

Indeed. A bug in a casino and only being known by a few people will lead them to try to abuse it and make easy money. If the casino's securities team did not discover this, sooner or later, the money there would run out without them knowing what caused it. The finance team can also find out if there are transactions that are not as usual by auditing their financial statements every day.

[AicecreaME]

I guess this need to make an action by the gambling platform immediately because this is a crucial related to their transactions it might affect the sales and if the people see this kind of bug they will take an abuse and make an easy money.

Indeed. A bug in a casino and only being known by a few people will lead them to try to abuse it and make easy money. If the casino's securities team did not discover this, sooner or later, the money there would run out without them knowing what caused it. The finance team can also find out if there are transactions that are not as usual by auditing their financial statements every day.

With our technology, I really doubt the developers won't notice easily a discrepancy and sudden difference in their system. If their developers and security management team are always looking at the activities of their site, surely they would notice that there are glitches and errors from the system which people are abusing. Although it would be very unfortunate if the security team isn't really paying attention to details because like what you said, it could lead them to loss of profits, most especially if the abuse of the systme glitch was unnoticed for a long period of time.

This is why it is really important to keep the servers and security measures up to date. One must not be complacent because sometimes there are really errors even though you've already looked upon several times. Having a good team to examine every activities per day is necessary to secure the casino's functionality and security from possible abuse.

[sovie]

This is why it is really important to keep the servers and security measures up to date. One must not be complacent because sometimes there are really errors even though you've already looked upon several times. Having a good team to examine every activities per day is necessary to secure the casino's functionality and security from possible abuse.

Gambling and crypto comes with a baggage. The baggage is heavy most of the time- you have unable to carry them along and drown yourself in the pool of debt and trouble. Better safe than sorry. Stop where. needed - hold your hand where necessary and your would feel better.

[maestro20]

No, it's definitely not a visual bug. I'm not exactly an expert in this matter. they have a problem with buying a bowl game, you can pay less than what the system asks to do. and this will clearly affect the RTP of the slot itself with a long distance.

This seems like a critical vulnerability! Any decent game provider (or any developer in general) is supposed to give your report the highest priority and will try to fix the bug or patch the vulnerability as soon as they know about its existence since it may result in severe financial loss for their customers (casinos).
I suppose those game providers get tons of emails every single day (many of them are spam) so make sure to send them a detailed report with a PoC to explain how the vulnerability you found can be exploited and its impact.
Instead of ignoring your messages, they should give you a reward.

I guess this need to make an action by the gambling platform immediately because this is a crucial related to their transactions it might affect the sales and if the people see this kind of bug they will take an abuse and make an easy money. Do you have a response to the team already?.

I got a response from the game provider, quote: "Hi may I help?".
Although I described everything to them that they have a problem in the game, I am ready to tell everything, I wrote my additional contacts.
Here, obviously, the guys have not yet encountered vulnerabilities in their games. Although they are already 4 years old, as they write.

[maestro20]

And yes, I also discovered "maybe" another vulnerability in another provider. But I can't be sure yet if this is a vulnerability or just a visual bug.

[DoublerHunter]

I guess this need to make an action by the gambling platform immediately because this is a crucial related to their transactions it might affect the sales and if the people see this kind of bug they will take an abuse and make an easy money.

Indeed. A bug in a casino and only being known by a few people will lead them to try to abuse it and make easy money. If the casino's securities team did not discover this, sooner or later, the money there would run out without them knowing what caused it. The finance team can also find out if there are transactions that are not as usual by auditing their financial statements every day.

^ It is very crucial to risk your fund and abuse the bug because sooner or later they will find it and it could be, your account will be locked and did not access anymore. We can tell the bug to the team, and they probably give rewards for those who can report the bug, that is why I like a gambling casino that has a bug bounty and the hunter will find it and you will know how to fix it before they will abuse the bugs. The longer casino is in service the more they have encountered issues and I don't think vulnerabilities are pretty normal, for me, as long as it has a good reputation and it's fine to go.

[khaled0111]

I got a response from the game provider, quote: "Hi may I help?".
Although I described everything to them that they have a problem in the game, I am ready to tell everything, I wrote my additional contacts.
Here, obviously, the guys have not yet encountered vulnerabilities in their games. Although they are already 4 years old, as they write.

This looks like an automated reply and it shows how unprofessional they are.
Did you check recently if the bug still exist and hasn't been fixed yet?
Some game providers choose not to respond to such messagges and play fool but they do fix the issue thinking that acknowledging it and that their codes are not perfect may harm their reputation and so they dont have to pay a bug bounty.

[maestro20]

I got a response from the game provider, quote: "Hi may I help?".
Although I described everything to them that they have a problem in the game, I am ready to tell everything, I wrote my additional contacts.
Here, obviously, the guys have not yet encountered vulnerabilities in their games. Although they are already 4 years old, as they write.

This looks like an automated reply and it shows how unprofessional they are.
Did you check recently if the bug still exist and hasn't been fixed yet?
Some game providers choose not to respond to such messagges and play fool but they do fix the issue thinking that acknowledging it and that their codes are not perfect may harm their reputation and so they dont have to pay a bug bounty.

Just checked, still working

[ethereumhunter]

I guess this need to make an action by the gambling platform immediately because this is a crucial related to their transactions it might affect the sales and if the people see this kind of bug they will take an abuse and make an easy money.

Indeed. A bug in a casino and only being known by a few people will lead them to try to abuse it and make easy money. If the casino's securities team did not discover this, sooner or later, the money there would run out without them knowing what caused it. The finance team can also find out if there are transactions that are not as usual by auditing their financial statements every day.

With our technology, I really doubt the developers won't notice easily a discrepancy and sudden difference in their system. If their developers and security management team are always looking at the activities of their site, surely they would notice that there are glitches and errors from the system which people are abusing. Although it would be very unfortunate if the security team isn't really paying attention to details because like what you said, it could lead them to loss of profits, most especially if the abuse of the systme glitch was unnoticed for a long period of time.

This is why it is really important to keep the servers and security measures up to date. One must not be complacent because sometimes there are really errors even though you've already looked upon several times. Having a good team to examine every activities per day is necessary to secure the casino's functionality and security from possible abuse.

But hopefully, the security team of each casino can always be aware of any unusual activity, be alert, and immediately respond to attackers.

Updating the server and looking for bugs in the server is very important for the security team to avoid attackers getting into the server and taking things from there. The security team must coordinate with other teams to get information that is useful to protect the casino from any attackers.

[TheGreatPython]

With our technology, I really doubt the developers won't notice easily a discrepancy and sudden difference in their system. If their developers and security management team are always looking at the activities of their site, surely they would notice that there are glitches and errors from the system which people are abusing. Although it would be very unfortunate if the security team isn't really paying attention to details because like what you said, it could lead them to loss of profits, most especially if the abuse of the systme glitch was unnoticed for a long period of time.

This is why it is really important to keep the servers and security measures up to date. One must not be complacent because sometimes there are really errors even though you've already looked upon several times. Having a good team to examine every activities per day is necessary to secure the casino's functionality and security from possible abuse.

If they are attentive and have some kind of monitoring software apart from hiring a good amount of people to watch the site then it will be fixed as soon as possible but if not then those who discovered the bug are lucky that they can still withdraw what they have got and they can abuse it again and again until the admins will finally notice it. They can lose money on this tragedy but they should not lose hope easily. They can try to continue the operations and hope that they can run smoother this time.

This is still a gambling site and they have an advantage over the players. They can surely recover what is lost and they can earn more than that.

[sovie]

With our technology, I really doubt the developers won't notice easily a discrepancy and sudden difference in their system. If their developers and security management team are always looking at the activities of their site, surely they would notice that there are glitches and errors from the system which people are abusing. Although it would be very unfortunate if the security team isn't really paying attention to details because like what you said, it could lead them to loss of profits, most especially if the abuse of the systme glitch was unnoticed for a long period of time.

This is why it is really important to keep the servers and security measures up to date. One must not be complacent because sometimes there are really errors even though you've already looked upon several times. Having a good team to examine every activities per day is necessary to secure the casino's functionality and security from possible abuse.

If they are attentive and have some kind of monitoring software apart from hiring a good amount of people to watch the site then it will be fixed as soon as possible but if not then those who discovered the bug are lucky that they can still withdraw what they have got and they can abuse it again and again until the admins will finally notice it. They can lose money on this tragedy but they should not lose hope easily. They can try to continue the operations and hope that they can run smoother this time.

This is still a gambling site and they have an advantage over the players. They can surely recover what is lost and they can earn more than that.

Hackers are always a head of what developers think. So even if you think you have secured your website. You can't be sure what loophole you have left.
So be vigilant keep the data safe and play safe. You never know when is the trouble knocking at the door?