Lack of bug bounties from gambling platforms

[Flexystar]

We had some but it turned out to be rat race for earning some quick bucks. I have seen the trend for big bounties going down since 2017. Being one of the user of various gambling sites I have always loved identifying the bugs and directly reporting it to the mods on their official website. However, this forum did take those bounties to next level by making them paid one. But as I said with the time they disappeared in the thin air! Not getting much of the attention because most of the gambling sites now have more or less external sources or developers to identify the bugs and they will pay you directly. I don’t know how much relevant this is here but mostly they always communicate through telegrams and will give you job directly if you are interactive and honest.

[1714767750]

1714767750

[1714767750]

1714767750

[1714767750]

1714767750

[Wapfika]

We had some but it turned out to be rat race for earning some quick bucks. I have seen the trend for big bounties going down since 2017. Being one of the user of various gambling sites I have always loved identifying the bugs and directly reporting it to the mods on their official website. However, this forum did take those bounties to next level by making them paid one. But as I said with the time they disappeared in the thin air! Not getting much of the attention because most of the gambling sites now have more or less external sources or developers to identify the bugs and they will pay you directly. I don’t know how much relevant this is here but mostly they always communicate through telegrams and will give you job directly if you are interactive and honest.

Bounties were not that popular now, it might be a personal hiring now in telegram depending on your profile and application. Since it is hard to filter now participants in bounties some look for it  in other platform so they can scan applicants properly. There is not much new gambling sites to test and when there is, this forum gives review and feedbacks already about the casino same with other old casinos that have thread here, many are open now to their review.

[seoincorporation]

There are multiple reasons for this.

Casinos don't want to attract hackers to their sites because some kind of attacks can crash the site. And if an attacker finds a huge vulnerability they could take the money from the site and that more than what the casino offers as bounty.

But what i have learned in the past is all casinos will pay a bounty if you report a bug by the proper way. I have reported bugs in more than 5 casinos in the past years and all of them pay me a bounty, the only one that freeze my balance and claim that i was attacking the site was primedice, in that time i was collecting evidence to report the bug but the site block my account with 0.03 btc on it. It was my fault, i should report the bug and not exploit it to collect evidence.

[Wexnident]

Casinos should be bug-free and hacker-proof for them to gain the trust of the gambling community, there are casinos with their own created script because many casinos now are on the Whitelabel run platform, it's more cost-effective, easy to manage, and the burden is on the Whitelabel company they are the one who handles everything, that is why we seldom read of casino getting hacked it's not because hackers can't hack their system but they have experts developers to look for a patch 24/7 because that's their business, protecting their platform.

There's no system that's 100% system proof though. You can't consider a system being managed 24/7 as foolproof since it's that 24/7 management that makes it foolproof. I do agree with the Whitelabel solutions though, as I've said in my earlier post they're pretty much the same so the amount of bugs is rather minimal.

Bounties were not that popular now, it might be a personal hiring now in telegram depending on your profile and application. Since it is hard to filter now participants in bounties some look for it  in other platform so they can scan applicants properly. There is not much new gambling sites to test and when there is, this forum gives review and feedbacks already about the casino same with other old casinos that have thread here, many are open now to their review.

Rather than unpopular, bug bounty is just something more specialized to people who actually know how to attack systems instead. And another factor is as others and I have said, casinos use Whitelabel solutions so the bugs that could be found would already be rather minimal.

[uneng]

Every virtualsystems connected to internet are prone to vulnerabilities which can be exploited by hackers, therefore, it would be wise from every crypto casinos if they launched bug bounties periodically.

However, we don't see them doing this often. Maybe it's because they prefer to spend their funds with marketing instead and see no point in paying random people on the internet to spot bugs for them, since they also have their staff team with many professionals on the informatics field. Moreover, some casinos might purchase the security system from third party services, so it must be a guarantee, belonging the responsability to the company they made the purchase from.

[ralle14]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

I remember some crypto casinos used to offer bug bounties as a way to test the security of their site, on bustabit they have something similar. Back then Bitdice also tried to test their security by putting up a bounty in one of their accounts not sure if it still stands though. In terms of security, I think most reputable crypto casinos have one of the best security since they tend to make changes or improvements from time to time.

[Silberman]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

There are two possibilities for this, the first one is that there is in fact bug bounties in some of the casinos but those are not public and you need to be invited directly by the ones in charge of the code and the security of the casino in question, the second possibility is that as you state some casinos do not care about this and they are not testing the security of their website as well as they should, however if you find a vulnerability you may report it and try to negotiate a fee for your efforts in finding that bug and other bugs you may find in the future.

[erep]

There are two possibilities for this, the first one is that there is in fact bug bounties in some of the casinos but those are not public and you need to be invited directly by the ones in charge of the code and the security of the casino in question, the second possibility is that as you state some casinos do not care about this and they are not testing the security of their website as well as they should, however if you find a vulnerability you may report it and try to negotiate a fee for your efforts in finding that bug and other bugs you may find in the future.

Exactly, because every casino will increase the security of access from hackers so the 2 possibilities you mentioned are how the casino accepts developer services for privacy and security factors. Usually there is a special page for the bug bounty campaign so that anyone who finds a bug can submit it on the form provided, then if the bug report is valid and includes a high level of security will be paid high by the casino platform.

[Mahanton]

There are two possibilities for this, the first one is that there is in fact bug bounties in some of the casinos but those are not public and you need to be invited directly by the ones in charge of the code and the security of the casino in question, the second possibility is that as you state some casinos do not care about this and they are not testing the security of their website as well as they should, however if you find a vulnerability you may report it and try to negotiate a fee for your efforts in finding that bug and other bugs you may find in the future.

Exactly, because every casino will increase the security of access from hackers so the 2 possibilities you mentioned are how the casino accepts developer services for privacy and security factors. Usually there is a special page for the bug bounty campaign so that anyone who finds a bug can submit it on the form provided, then if the bug report is valid and includes a high level of security will be paid high by the casino platform.

Depends on a certain person because there are individuals who do able to find those bugs will surely be exploiting and abusing it rather than on making out some report or ticket on telling the team.
There are even platforms who doesnt really give out any bounties or reward for some possible crucial finds that really affects or do pertains about security.
But knowing with those popular platforms which someone do find out some bugs and they havent paid out and then that someone do make out some complaints and posting into this forum
then for sure they would really be getting that sympathy since it is really just worth on getting bounty or reward for that.

[Piesel]

Depending on the individual motive and profession and as a software developer one can be invited for such bug bounty by the team and if the casino find is worthy the developer will walk away with the negotiated payment, both again we must know some fact about software it is that there is always a back door and the one with the code control everything. So the reason why we have so many casinos abuse is because of all this set backs.
 

There are two possibilities for this, the first one is that there is in fact bug bounties in some of the casinos but those are not public and you need to be invited directly by the ones in charge of the code and the security of the casino in question, the second possibility is that as you state some casinos do not care about this and they are not testing the security of their website as well as they should, however if you find a vulnerability you may report it and try to negotiate a fee for your efforts in finding that bug and other bugs you may find in the future.

Exactly, because every casino will increase the security of access from hackers so the 2 possibilities you mentioned are how the casino accepts developer services for privacy and security factors. Usually there is a special page for the bug bounty campaign so that anyone who finds a bug can submit it on the form provided, then if the bug report is valid and includes a high level of security will be paid high by the casino platform.

Depends on a certain person because there are individuals who do able to find those bugs will surely be exploiting and abusing it rather than on making out some report or ticket on telling the team.
There are even platforms who doesnt really give out any bounties or reward for some possible crucial finds that really affects or do pertains about security.
But knowing with those popular platforms which someone do find out some bugs and they havent paid out and then that someone do make out some complaints and posting into this forum
then for sure they would really be getting that sympathy since it is really just worth on getting a bounty or reward for that.

Am sure if a player on a gambling site discovers any bug and reports such to the support he will receive a good reward for doing that.

[DoublerHunter]

There are two possibilities for this, the first one is that there is in fact bug bounties in some of the casinos but those are not public and you need to be invited directly by the ones in charge of the code and the security of the casino in question, the second possibility is that as you state some casinos do not care about this and they are not testing the security of their website as well as they should, however if you find a vulnerability you may report it and try to negotiate a fee for your efforts in finding that bug and other bugs you may find in the future.

Exactly, because every casino will increase the security of access from hackers so the 2 possibilities you mentioned are how the casino accepts developer services for privacy and security factors. Usually there is a special page for the bug bounty campaign so that anyone who finds a bug can submit it on the form provided, then if the bug report is valid and includes a high level of security will be paid high by the casino platform.

^But, why this is very rare now, what I mean is why most casinos did not run a bug bounty campaign.
I know it will add their cost but I think this is a proper way to know publicly the bug and their developer can quickly resolve it.
I think the best way in a new gambling casino is while having a signature campaign they also conduct a bug bounty campaign so that it will give boost to their improvement and progress.

[samcrypto]

^But, why this is very rare now, what I mean is why most casinos did not run a bug bounty campaign.
I know it will add their cost but I think this is a proper way to know publicly the bug and their developer can quickly resolve it.
I think the best way in a new gambling casino is while having a signature campaign they also conduct a bug bounty campaign so that it will give boost to their improvement and progress.

We cannot answer this because every site have their own needs, and it's not mandatory so it should not be a question to us.
Many site started their operation without having this bug hunting, maybe because they work hard with their site and they are confident that it will work 100%. Signature campaign are for their marketing side, bug hunting might not be a good idea if you are marketing your platform. Again, it will still depend on every site, and as a hunter we can't do anything about it aside from waiting for a new bug bounties.

[boyptc]

^But, why this is very rare now, what I mean is why most casinos did not run a bug bounty campaign.
I know it will add their cost but I think this is a proper way to know publicly the bug and their developer can quickly resolve it.
I think the best way in a new gambling casino is while having a signature campaign they also conduct a bug bounty campaign so that it will give boost to their improvement and progress.

One thing is for sure, we don't know what each of the casinos reason why they don't do that anymore. Possible that they already have their own providers for that task and that's why it's no longer needed.

If we don't see it most often then it only means that it's not needed anymore because they've got something that's doing it for them. As it is becoming rare, someone may want to ask that directly from them.

[adzino]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Very rarely heard that any casinos were prone to hacking. And I am sure most casinos have bug bounties. They do pay users for finding bugs. The more serious the bug is, the higher they are willing to pay. You have to let them know how the bug can be replicated before they pay you or there would be many fake claims to try and scam the casino and trust me, it happens a lot!

[Rengga Jati]

The security of a system will not be exactly 100% secure. I believe that actually sometimes there are still gaps in various platforms. However, they may have their own special team that frequently checks or evaluates their program.
But I agree that there is nothing wrong with a gambling platform doing bug bounties. Because wouldn't this help them more to deal with the worst possible scenarios on their platform, right? Moreover, the bug bounty also provides several benefits to strengthen and improve their system.

I've been browsing and found that there are several gambling platforms that do it, but I don't understand whether they are really legit or not.
Maybe you can analyze them more.
MPL
BingX
Immunefi

[Bitinity]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking?

Are you a bug hunter so it makes you ask about such unusual question in this gambling board? Or is it because you care enough with the situation where gambling websites get hacked? I cant get the exact information on how many gambling sites are hacked, just wondering why you can say "most" while it is rare to see gambling sites are hacked in this crypto industry.

If I am wrong what gambling project do you think have the most secured system?, peace.

I have no idea to be honest since it is not my thing, but I believe most reputable crypto casinos do their best for their security system because they are aware about the chance to be hacked so they should have done all the best to minimize hacking attempt by hacker.

[worle1bm]

Casinos should be bug-free and hacker-proof for them to gain the trust of the gambling community, there are casinos with their own created script because many casinos now are on the Whitelabel run platform, it's more cost-effective, easy to manage, and the burden is on the Whitelabel company they are the one who handles everything, that is why we seldom read of casino getting hacked it's not because hackers can't hack their system but they have experts developers to look for a patch 24/7 because that's their business, protecting their platform.

They make the debugging test before implementing them on site but you see with some minor vulnerabilities hackers can attack the site like the DDOS attack or draining out funds from wallets but they need to keep monitoring these issues with expert team with them.We can't say that this site is Full secure as we see with new updates there could be security risk or something like that.But they need to handle it as soon they find out about it.

[Daltonik]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

If you read TaC online casinos, you will notice that many of them use third-party software solutions to ensure security, whose names are not disclosed, obviously they fully trust them and interact with them. In addition, as already mentioned here, the reward for detecting security failures was announced by Fortune Jack, Bitcasino, Cakebet online casinos or, for example, Betcoin casino conducted the Dice Bug Bounty program, You can also see the passing bug bounties on the website https://www.bugcrowd.com/bug-bounty-list/

[radjie]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking?

the site owner certainly has a reliable team to handle the security system, even the programming has been designed in great detail before the site is published so it will not involve many people.  maybe that's one of the reasons why gambling platforms don't provide bug bounty services because they are quite vulnerable and of course there are certain communities or organizations that are able to test them themselves

[Reatim]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

some of them may consider this as a threat to their security as some might not report the Bug at all and will use against them in time .

But there is a site I remember years back that had this Bug bounty , and I think  it ended well as now they formally relaunch  their Signature campaign with confidence .

So maybe the Bug bounty had helped them out for many reason and now they are enjoying the outcome of that said Bounty.

^But, why this is very rare now, what I mean is why most casinos did not run a bug bounty campaign.
I know it will add their cost but I think this is a proper way to know publicly the bug and their developer can quickly resolve it.
I think the best way in a new gambling casino is while having a signature campaign they also conduct a bug bounty campaign so that it will give boost to their improvement and progress.

One thing is for sure, we don't know what each of the casinos reason why they don't do that anymore. Possible that they already have their own providers for that task and that's why it's no longer needed.

If we don't see it most often then it only means that it's not needed anymore because they've got something that's doing it for them. As it is becoming rare, someone may want to ask that directly from them.

or maybe they have found a way to find Bug , or something offering directly so there is not need for Bounty inside the forum.