Lack of bug bounties from gambling platforms

[Crypt0Gore]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

[1714754173]

1714754173

[1714754173]

1714754173

[1714754173]

1714754173

[1714754173]

1714754173

[1714754173]

1714754173

[cabron]

FortuneJack I remember launched a bug bounty in the forum back 2020 https://bitcointalk.org/index.php?topic=5259299.0
It was the first I've seen but mostly is for the user's experience.

So far there was no incident of casino getting hack.
It wasn't about vulnerabilities where hackers will examining their codes for security. But I think they will be happy to pay someone who can warn them about the vulnerabilities if they do penetration testing.



 

[Oshosondy]

Security bug bounty are the reward given to hackers after the code of a software for an application or a platform has been created and have finished work on. These hackers would test for vulnerabilities to see if there is no bug. If there is any bug known to them, they would fixed it. After bug fixed, the software would be available for users.

Is that not the work of developers to check for vulnerabilities by all means? Or a site would have to first pay to developers and later pay for hackers for it. I do not know much about that though, but I know that some sites do that too. Despite all the hack I have been hearing about, I have played on many gambling sites, and recently most especially on this forum, the gambling sites are getting more successful in a way they can lay customers money.

Even if I do not know much about how security bug bounties is with gambling sites, what that matters is that the gambling sites are getting successful day by day and able to pay their customers and rendering their customers good services.

What that matters most is to use a trustworthy gambling sites and you are good.

[bitcampaign]

can you list the hacked gambling sites maybe i missed the news or i am right that so far i have never seen any hacked crypto gambling sites and they all look safe till date i would love to see the list to avoid them in future to play there, I also think that not many gambling sites hold bug bounty events for their gambling sites because what I know seems to be that gambling sites have a strong security system

If I am wrong what gambling project do you think have the most secured system?

maybe gambling sites that use web3 can be safer

[mu_enrico]

The problem is that tons of gambling websites buy white-label solutions for their sites. The situation is like when you build a website with WordPress and you've been notified that there are vulnerabilities on your site, what will you do? You just wait for the next WordPress security patch and pray it will solve your problem. There's no incentive to fix the white-label product since you buy it and hope it works OOB.

If you want to do bug bounty, try to contact the white-label provider or sites that have proprietary code.

[FatFork]

It's a very interesting topic, and one I think merits further discussion. Maybe the casinos are using "old school" methods for testing software, or maybe their vulnerability tests are just not as well known. I'm sure there's a ton of people willing to work on bug bounties. But in the end, it really comes down to the casino's incentive. If the casino has a system in place that fixes bugs and closes vulnerabilities quickly, then they likely don't see any reason to offer a bug bounty. Basically, their cost-benefit analysis says that it's not worth the time and effort to offer a bounty program. If they don't have any kind of bug bounty program, it's probably because they don't see much value in having external parties help them make their systems more secure. However, if the casino has a poor security record, then they may be more willing to offer one in order to improve their security profile.

[goldkingcoiner]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

As someone already mentioned in an above post, most casino owners do not bother writing their own code from scratch. Why? For the same reason why they do not like it when people start winning big money. Greed, basically. The owners would rather buy some white label code and add some fancy user experience design of their own without changing what runs the games underneath. And from a perspective of cost, its really the smart thing to do. Unless you want to create something which is unique. But why would anyone want a unique casino? Clone copies make the same money.

And those clone copies have gotten so advanced and audited all this time that bug bounties do not make much sense. Its just too hard to find a bug in something like that.

[swogerino]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

I think the real serious ones have hired a team to continuously monitor the security of their websites because the bigger the website is with a lot of databases and other critical infrastructure the better the cyber security team should be.They the serious gambling platform do this but of course they do it in private and they do not need to disclose this information by making it going public,this is a secret of course between the penetration testers team hired to try the security of the site and offer improvement when found bugs,that is why you don't see it.

[peter0425]

FortuneJack I remember launched a bug bounty in the forum back 2020 https://bitcointalk.org/index.php?topic=5259299.0
It was the first I've seen but mostly is for the user's experience.

So far there was no incident of casino getting hack.
It wasn't about vulnerabilities where hackers will examining their codes for security. But I think they will be happy to pay someone who can warn them about the vulnerabilities if they do penetration testing.



 

There are also some services that offers Bug bounty services but yeah Only FortuneJack put a campaign for bug Bounty and yes they are successful in this task and now their site is running good without any or at least without major bug problems .

I also believe that New gambling sites must conduct the same bounty for the betterment of their site in long term , this is also to show how serious is their site and having business not only for profit but for servicing their players.

[Findingnemo]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Casinos maybe having the dedicated team to monitor their security system and even if there is any vulnerability and you found it then surely you can contact the casino support or email them and hope you will be given with reward.

Personally I feel why the casinos doesn't have such bounties for public is to avoid getting bad impression and unnec attacks into their security system.

[traderethereum]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

I think it might be because gambling websites already have their own security team to deal with and anticipate any vulnerabilities on their website.
But I think I've seen one or more casinos write an article about giving prizes to those who can find vulnerabilities on the website.
I don't know if the site could find the vulnerability and in the end, the casino site gave the prize.
Or maybe if the casino or even someone discovers the vulnerability, they don't make it public.

[virasisog]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

I'm sure that big casinos are doing that thing to test the security of their site from time to time. They're aware that the possibility of getting attacked by hackers is too big so for sure, they're finding ways to test their security, especially those who have experienced hacking before. It's one of the important things that a website is protecting because, without the guarantee of security, they will surely have their reputations ruined.

[Solosanz]

Most of gambling sites are prone to hacking? AFAIK since I'm joined this forum from the beginning until right now, I don't see any trustworthy casinos get hacked. Unlike centralized exchanges where there's always one exchanges will get hacked every year.

I don't think casinos have the most secured system, maybe the reason why there's no many casinos get hacked is coins from gambling are considered as high illicit money.

Bug bounties might not be needed if they haven't get hacked, the funds will mostly used for advertisement or marketing.

[robelneo]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Why would they launch a bug bounty when we have no report of casinos getting hacked, you did not mention casinos that were hacked for you to ask why casinos should launch a bug bounty, they are using and subscribing to white label its the Whitelabel casino script maker that should launch a bug bounty and besides there's no need of that because these white labels have their own developers and they are the one hiring hackers to test their site before offering this to casino operators.

[panjul07]

There were some casinos had such bug bounties but I cant really remember the names.
These days it is indeed rare to see casinos open a bug bounty publicly but I think most casinos has their own policy about bug bounty so if there is someone who find significant bug in the casino then he/she may contact them privately.
I believe it is how it works now, if you find a bug (serious one), better for you to contact them through the support and ask them if they have reward for anyone who find a serious bug.
Other possibility why it is lack of bug bounties now is that most casinos had tested their own platform well, perhaps they hired the best person to check the platform before the launch.
It makes them confident enough that there is no more bug in platform so they do not need to run bug bounties.

[Saisher]

There are a lot of costs in creating your own casino script while if you will just buy a white label it saves you a lot of cost and Whitelabel will take care of everything, of course, they made sure that their platform is bug-free because you're paying them with the huge amount money, so you can concentrate only in marketing which is the most important part when running a casino.

The Advantages of White Label Casino
Getting a fully operational system is already a huge advantage. Apart from that, you get the licence, a custom website design for your website, and integrated verified payment options with many more to come. You can fully concentrate on casino marketing, while SoftGamings does the rest for you.

https://www.softgamings.com/igaming-solutions-and-platforms/white-label-casino-software/

[stomachgrowls]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Same to presume that they had already done that earlier or before they do launched up the site in public.Just like on the previous post or response of a member above that there's one i have seen
on the past too which is Fortunejack.They do set out huge or significant bounty if ever there are ones who do able to seek out for some holes or exploits.

Most of them had already set out those security measures.They do have the staff or the one who do take care when it comes to security.
This is why we dont really see bug bounties.

[Fortify]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

I think it's a bit of a novelty and consequence of them relying on such an anonymous form of currency. If a "whitehat" hacker really wants to get a reward for finding a bug, contacting the support team and asking to speak to someone involved with security might illicit the same sort of response as any bug bounty page. On the flip side, it might be more apt for someone who wants to help to seize the funds directly via the exploit because they could be taken by a criminal who would not be so willing to return them at any point. We never hear about hacking activity taking place, as it would ruin such a site but it does seem like a bug bounty program would be sensible to offer.

[TimeTeller]

There were some casinos had such bug bounties but I cant really remember the names.
These days it is indeed rare to see casinos open a bug bounty publicly but I think most casinos has their own policy about bug bounty so if there is someone who find significant bug in the casino then he/she may contact them privately.
I believe it is how it works now, if you find a bug (serious one), better for you to contact them through the support and ask them if they have reward for anyone who find a serious bug.
Other possibility why it is lack of bug bounties now is that most casinos had tested their own platform well, perhaps they hired the best person to check the platform before the launch.
It makes them confident enough that there is no more bug in platform so they do not need to run bug bounties.

Yes, there were few. I remember one, exbet.io, they offered some users to test their site for possible bugs.
I believe they gave a lil bit amount to test their site and report whatever they find issues or bugs before the actual launching.
But not many new sites are doing this kind of effort. For some long-time casinos, they may have their own security team running such tests.
Because these large casinos with large number of players as well as bankroll amount, definitely, they have certain department taking care of these troubles or possible issues.

[Vaskiy]

The security systems were well advanced and this makes the developers confident over their platform. However there'll be issues and the same used to get solved often. These days the development team itself have got team members dedicatedly working of identifying bugs. This have made developers concentrate much on user needs and for that reason more real time experience programs were run by new gambling sites than bug bounties.