Lack of bug bounties from gambling platforms

[goaldigger]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Some site already done this before and I even participated on those bug bounties and I guess this is really a big help to see if the site is working perfectly or there can still be bug which needs to be address right away.

Well, we cannot force every site to have this especially if they have a specific team to handle bugs from time to time, they probably rely more on their IT professionals than to users here in the forum and that is fine as well.

[nakamura12]

I kind of noticed it too that gambling sites didn't run bug bounties this time of year for update of the security but I do remember that there is a bug bounty before which as you have said to test the security of the site and also to know if there is any bug that gamblers may take advantage of it. I didn't get much time to participate in it but I did just for fun and to help not because of the reward since I don't have nothing else to do during my free time.

[paxmao]

Either they feel very safe or they are outdated in relation with best practices. White hat hacking including bugs or even beta testing by the crowd is actually a sound way of detecting what is wrong with you site and even can save plenty of headaches in the future. Also, it is quite cheap compared to an audit and may actually yield better results. It has to be used with care of course, as there may be incentives to hack and not tell.

[erep]

Some site already done this before and I even participated on those bug bounties and I guess this is really a big help to see if the site is working perfectly or there can still be bug which needs to be address right away.

Well, we cannot force every site to have this especially if they have a specific team to handle bugs from time to time, they probably rely more on their IT professionals than to users here in the forum and that is fine as well.

Every casino site has a dedicated team to protect servers from hackers in realtime so their platform no longer requires server security testing on bug bounty programs, although some top gambling platforms still open bug bounty durations indefinitely for the purpose of protecting anything from hacker threats. So if someone finds a critical bug that has an impact that could worsen the casino then it will be highly rewarded after the casino fixes it.

[Hamphser]

Some site already done this before and I even participated on those bug bounties and I guess this is really a big help to see if the site is working perfectly or there can still be bug which needs to be address right away.

Well, we cannot force every site to have this especially if they have a specific team to handle bugs from time to time, they probably rely more on their IT professionals than to users here in the forum and that is fine as well.

Every casino site has a dedicated team to protect servers from hackers in realtime so their platform no longer requires server security testing on bug bounty programs, although some top gambling platforms still open bug bounty durations indefinitely for the purpose of protecting anything from hacker threats. So if someone finds a critical bug that has an impact that could worsen the casino then it will be highly rewarded after the casino fixes it.

They are already hiring security team or someone who would really be back testing it before they would really be launching it on public.It is really just that common practice or default thing or set up for a business

to mind off on which security would be always the priority since gambling sites or platforms are really involved on huge money.They cant really be just careless on not to put up some emphasis or importance on this

one because this one could really cause possible huge impact on having huge losses or the worst they would really become bankrupt.They would be hiring those
security based workers and would be the ones on doing back testing and other related stuffs.

[crzy]

They have the team to handle this to ensure the site will be secured from any cheat or any hackers.
I see bug bounties as a way of marketing as well, if they hosted it most probably they want to get the attention of the public and help them explore it, if they saw some bug then much better. Most of the new site now came here really prepared and ready to operate, this might be one of the reason why bug bounties no longer required for them.

[Eureka_07]

<snip>.

Usually, bug bounties are held by those websites/system which are just newly launched. Despite of popping of new casinos almost everyday, I haven't seen anyone from them announce a bug bounties. The last one I saw was from FortuneJack.
Regardless, maybe they have very good security team, and system testers on the team that they aren't needed for bug hunt.

[Punt.com]

Bug bounty programs are essential to any online casino. I personally plan on adding a page to our platform, Punt.com, to publicly notify users of our bug bounty program. Although we don't have a dedicated page for the program yet, we do indeed offer bounties for bugs. For example, there have been numerous users over the span of ~2 months that have reported bugs to us via either livechat or email, and we have paid them for their report a sum in proportion to the bug found.

[coin-investor]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

As a player what would you think if a platform is offering a bug bounty, some players might think that the platform is not hacker-proof and there is a lack of security and they need help from bug bounty hunters to patch the security and this will alarm the gambling community, if the script is created by their own developers, they should do this patches in house and not expose it to the public, casino live and thrive on trust, and offering bug bounty will erode that trust.

Administrators and would-be admins of casinos can buy a Whitelabel script because it's created for casinos by experts they are bug and hacker-proof, the Whitelabel sellers should be the ones to launch bug bounty, not the casino operators.

[Scripture]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

The site knows how introduce their site and considering to host a bug bounty can also a good one but since it's not mandatory, many site don't have this kind of bounty. There might be a different interpretation when it comes to bug bounties, maybe for them you are just letting gamblers to see the problem with your site which can discourage many gamblers to try the site. Also, just like what the other said here they have the team to handle this, they are being paid for that so for sure they work better as a team.

[Fatunad]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

As a player what would you think if a platform is offering a bug bounty, some players might think that the platform is not hacker-proof and there is a lack of security and they need help from bug bounty hunters to patch the security and this will alarm the gambling community, if the script is created by their own developers, they should do this patches in house and not expose it to the public, casino live and thrive on trust, and offering bug bounty will erode that trust.

Administrators and would-be admins of casinos can buy a Whitelabel script because it's created for casinos by experts they are bug and hacker-proof, the Whitelabel sellers should be the ones to launch bug bounty, not the casino operators.

There's no such thing about perfect security but its impossible for business owners to just launch up a bug bounty if they are really that confident that their security team did a good job.
If he had some doubts then he could ran off a bounty but of course the money spent allocation for such bounty do counts on the expense.
Its up to their company if they would launch bounty program but if they do saw its not needed and they havent been hacked and constantly making up some
security upgrades then i dont see for it to be needed.

[DoublerHunter]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

The site knows how introduce their site and considering to host a bug bounty can also a good one but since it's not mandatory, many site don't have this kind of bounty. There might be a different interpretation when it comes to bug bounties, maybe for them you are just letting gamblers to see the problem with your site which can discourage many gamblers to try the site. Also, just like what the other said here they have the team to handle this, they are being paid for that so for sure they work better as a team.

^ Probably because that is an additional cost to them, they cannot afford to run a bounty campaign to hunt bugs but I remember before there are few gambling casinos doing this and one of them was FortuneJack which was given a link on the first page. That is right, this is not necessary for them and probably instead of doing this they have their own developer who fixes those system errors but the disadvantage is when it is already exploited by the users. However, regarding the question, of whether there is a secure gambling casino, they are not all secure but it depends on their reputation.

[Wakate]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

It seems you are not always current at the service section because I have seen many casinos doing that, asking for review of their platform in the aspect of security, interface and features that will keep their casino up to date and we'll secured. This is mostly done by new casinos that is getting into the casino world and we don't see that frequently.
I think more concentration should be put on that to ensure that user's safety is guaranteed. Checking for vulnerability and safety of casino frequently is very important which I know many big gambling platform used to do with different tools and workers that are checkmating for any possible leak that could lead to loss of asset.

[Beparanf]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Online Casino is not new these days and they build already a stable code over many years of operating including bug bounty during there early days. I believe some old casino still offer this bug bounty thing IIRC Bitsler but with minimal reward. You can only see this kind of event on new casino built on blockchain not with off-chain casino.

There's only rare scenario that online casino being hacked these days except those using hack as reason to escape. Do your bug hunt on crypto project if you really want to have a job. Casino has there own security team to do this job.

[Piesel]

This is the duty of the security department and that is why the security department is the final court for judgment as it relates to abuse in the system be it from customers or hackers that make any attempt to abuse the platform.

In the past casino, owners make public bounties for testers who will help them detect any bug in their system, but recent updates don't need that anymore as their internal security teams can keep up with the task of protecting the site from invaders.

[AmoreJaz]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

It seems you are not always current at the service section because I have seen many casinos doing that, asking for review of their platform in the aspect of security, interface and features that will keep their casino up to date and we'll secured. This is mostly done by new casinos that is getting into the casino world and we don't see that frequently.
I think more concentration should be put on that to ensure that user's safety is guaranteed. Checking for vulnerability and safety of casino frequently is very important which I know many big gambling platform used to do with different tools and workers that are checkmating for any possible leak that could lead to loss of asset.

yes, indeed! from time to time, i also encountered new casinos holding some sort of bug bounty program. though it is not common for most. but i believe, these casinos will always have their security team as we are talking about money here that goes in and out from their site at any time of the day. without any sort of protection, they can be bankrupt anytime owed to hackers. for the established ones, i am certain they have their own people who are taking care of all security concerns. this is one of the vital departments that casinos and sportsbooks should always have.
for me, this is a non-negotiable aspect for any gambling site who want to have their operations always up and running without bothering about their security protocols.

[Strongkored]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

You mean to do it in this forum? it's true that not as many casinos do signature campaigns on this fourm and only one can be found on this forum and that was done a few years ago, but it's very likely that they did it outside this forum.
Exchange is actually the one that gets hacked more than the casino and the one that gets hacked a lot is not the casino itself but the user account.
What is more often experienced by casinos is DDoS attacks so that users find it difficult to access to play so this can be detrimental to the casino because there is no income during the attack.

[Darker45]

It's probably because this has already been well taken care of by their security team? Or perhaps they're already hiring reliable security personnel to do the security audit or the step-by-step checking? So far, there seems to be no urgent reason to shift to another approach. Quite contrary to your claim, it seems there isn't really big news about crypto gambling websites falling to hackers.

But if you do find out a bug in one of these platforms, you might want to communicate with them and probably receive a reward commensurate to what you've discovered.

[Peanutswar]

As far as I know, there's a bug bounty event happening here in the community and that's the one I experience instead they are now offering some of the reviews right now as part of their promotions some instances there are a chance that they hired already a Quality Assurance tester before releasing in the community to have a better experience. It is better to hire a bounty hunter with experience with a contract so they make sure the information is safe and does not get a data breach for their system.

[Wexnident]

Aren't most casino sites pre-built? Like the owners just buy the site itself and they hire an IT team to manage it and that's it. Most casinos wouldn't exactly hire a team to build the site from the ground up especially if you consider how most casinos are basically the same all around in terms of functionality and whatnot. There was a case though afaik of one casino having a bug that happened here, it was quite a big issue since the one who found it used it to get quite a bit of money (but didn't fully take advantage of it iirc?) and then went on to luckily win big in a different game (this was pure luck afaik) using the money he won from the bug.

Sides, you not seeing any bug bounty doesn't exactly mean that their security is bad or that they're not doing it themselves. They might be doing it on a different platform suited for bug bounties, they don't necessarily need to do it here since this isn't a bug bounty forum.