Lack of bug bounties from gambling platforms

[BobK71]

Nowadays every casino is trying their best to ensure the security of their site. However, the developers of that site know what is the level of security is required or where there are weaknesses. I think everyone who owns a prominent site should prioritize security first or else their everything could be vulnerable to hacking at any time. But this security issue is very secure. for this reason no one outside can know about it. The better sites have a dedicated security team that works on security all the time of their site.

[1715332701]

1715332701

[1715332701]

1715332701

[1715332701]

1715332701

[1715332701]

1715332701

[1715332701]

1715332701

[pawanjain]

May be the casino owners are hiring full stack developers who test their code as well develop it.
May be they would have hired Quality Engineers to test the complete site for UI and UX.
Reason might be anything. Besides that, if someone is really good at bug bounty they can find bugs from any site and just report it to the owner.
If the site owner would be generous enough then they would reward that person anyway.

[Jemzx00]

Nowadays every casino is trying their best to ensure the security of their site. However, the developers of that site know what is the level of security is required or where there are weaknesses. I think everyone who owns a prominent site should prioritize security first or else their everything could be vulnerable to hacking at any time. But this security issue is very secure. for this reason no one outside can know about it. The better sites have a dedicated security team that works on security all the time of their site.

Most of the casino start-ups as well as the already running casino already has great security measures added on their platform to avoid any issue on potential loss or hacking issue. It's very rare to hear if there are any gambling platform that have been hacked for the past years. However, loopholes and minor bugs are pretty common on most gambling platform where users usually abuse but once the casino noticed it, it usually gets fixed swiftly.

[Beparanf]

May be the casino owners are hiring full stack developers who test their code as well develop it.
May be they would have hired Quality Engineers to test the complete site for UI and UX.
Reason might be anything. Besides that, if someone is really good at bug bounty they can find bugs from any site and just report it to the owner.
If the site owner would be generous enough then they would reward that person anyway.

This is always the case right now. Casino has there own employee to oversee the security of the casino due to the huge amount of money involved nowadays in the casino. They are now investing on security compared before that they do it by themselves with the help of this bug bounty hunter. I remember that some abused this before by attacking the casino and reported it as bug to claim rewards.

Nowadays those critical bug is already solved since most the games are now coming from 3rd party which has license and audit properly.

[abel1337]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Maybe because they hired someone to the penetration teating and have someone tested the site? I joined fortune jack bug campaign before and It's pretty fun because you will explore all of the function of the website and try to find bug from it. I'ved tried bug bounty once and I personally like it because it's fun and you can gain knowledge from the experience.

[Cling18]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking?

the site owner certainly has a reliable team to handle the security system, even the programming has been designed in great detail before the site is published so it will not involve many people.  maybe that's one of the reasons why gambling platforms don't provide bug bounty services because they are quite vulnerable and of course there are certain communities or organizations that are able to test them themselves

The owner will not run their platform without assuring that their site is secure. They surely have enough funds allocated to maintain the security of their site because that's how businessmen protect their businesses.
We might not see or notice it but they are doing it as a part of the maintenance system and they don't need to broadcast it.

[Wiwo]

Maybe the casino owners are hiring full-stack developers who test their code as well develop it.
Maybe they would have hired Quality Engineers to test the complete site for UI and UX.
The reason might be anything. Besides that, if someone is good at bug bounty they can find bugs from any site and just report it to the owner.
If the site owner would be generous enough then they would reward that person anyway.

As time evolves and new developments to meet up with present security demands are constantly contended against, most casinos already have highly placed security teams that work on updating and developing new anti-bug software that will help against any bug attack and leakage. Quite a lot of other casinos that have fallen victim to bug attacks suffered badly at the hand of abusers who took advantage of such bugs to abuse the system, but now most casinos are proactive against bugs and other security challenges.

[decodx]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking?

the site owner certainly has a reliable team to handle the security system, even the programming has been designed in great detail before the site is published so it will not involve many people.  maybe that's one of the reasons why gambling platforms don't provide bug bounty services because they are quite vulnerable and of course there are certain communities or organizations that are able to test them themselves

The owner will not run their platform without assuring that their site is secure. They surely have enough funds allocated to maintain the security of their site because that's how businessmen protect their businesses.
We might not see or notice it but they are doing it as a part of the maintenance system and they don't need to broadcast it.

I think that it depends and that it is not the same for every online casino. Some online casinos have a good security measures in place to protect the platform and their players from hacking and theft, but it is also true that there are also those who are not that secure. For example, it is common knowledge that some online casinos do not have a good reputation and they don't care about their customers. So it is entirely possible that these types of online casinos are insecure, and their protection system is not strong enough to keep the data safe from hackers. Because of this, it is a good idea to be extra cautious and make sure that any business, especially those that involve money in their transactions, is safe and secure. The online casinos are not perfect and they have weaknesses that can be exploited by hackers, scammers and other criminals. The only way to get the most secure platform is to choose a casino that uses software from reputable providers. These companies have huge experience and long term relationships with the big-name casinos, so they can be trusted to deliver the best possible service to customers .

[Mahanton]

Depending on the individual motive and profession and as a software developer one can be invited for such bug bounty by the team and if the casino find is worthy the developer will walk away with the negotiated payment, both again we must know some fact about software it is that there is always a back door and the one with the code control everything. So the reason why we have so many casinos abuse is because of all this set backs.
 

There are two possibilities for this, the first one is that there is in fact bug bounties in some of the casinos but those are not public and you need to be invited directly by the ones in charge of the code and the security of the casino in question, the second possibility is that as you state some casinos do not care about this and they are not testing the security of their website as well as they should, however if you find a vulnerability you may report it and try to negotiate a fee for your efforts in finding that bug and other bugs you may find in the future.

Exactly, because every casino will increase the security of access from hackers so the 2 possibilities you mentioned are how the casino accepts developer services for privacy and security factors. Usually there is a special page for the bug bounty campaign so that anyone who finds a bug can submit it on the form provided, then if the bug report is valid and includes a high level of security will be paid high by the casino platform.

Depends on a certain person because there are individuals who do able to find those bugs will surely be exploiting and abusing it rather than on making out some report or ticket on telling the team.
There are even platforms who doesnt really give out any bounties or reward for some possible crucial finds that really affects or do pertains about security.
But knowing with those popular platforms which someone do find out some bugs and they havent paid out and then that someone do make out some complaints and posting into this forum
then for sure they would really be getting that sympathy since it is really just worth on getting a bounty or reward for that.

Am sure if a player on a gambling site discovers any bug and reports such to the support he will receive a good reward for doing that.

I said it would be not all people would really be doing that specially if he had able to make out money easily with those kind of exploits which he might able to make more money rather than on telling the team.
Thats if he could make out some withdrawal successfuly but most of the case whenever there are some unusual or shady activity, then the platform or site itself wont really be that dumb
on not to notice a players activity which it mind still end up on getting those funds to be locked up.Some doesnt really like on having those kind of advantage which ethically speaking,
which it is really indeed illegal and we dont really like to get ourselves involved on this type of stealing.

[nakamura12]

I said it would be not all people would really be doing that specially if he had able to make out money easily with those kind of exploits which he might able to make more money rather than on telling the team.
Thats if he could make out some withdrawal successfuly but most of the case whenever there are some unusual or shady activity, then the platform or site itself wont really be that dumb
on not to notice a players activity which it mind still end up on getting those funds to be locked up.Some doesnt really like on having those kind of advantage which ethically speaking,
which it is really indeed illegal and we dont really like to get ourselves involved on this type of stealing.

I think that's one of the reason why casinos didn't start bug bounties after quite some time because of some people won't report the bug that a person found that want to exploit. I am sure that there are other reason which is that they already have found or hired a person to work for their casino which the job is to find bugs and find way to fix it and the casino doesn't have to reward every bug found since it is now a job for one or more than one person to find bugs.

[Peanutswar]

I said it would be not all people would really be doing that specially if he had able to make out money easily with those kind of exploits which he might able to make more money rather than on telling the team.
Thats if he could make out some withdrawal successfuly but most of the case whenever there are some unusual or shady activity, then the platform or site itself wont really be that dumb
on not to notice a players activity which it mind still end up on getting those funds to be locked up.Some doesnt really like on having those kind of advantage which ethically speaking,
which it is really indeed illegal and we dont really like to get ourselves involved on this type of stealing.

I think that's one of the reason why casinos didn't start bug bounties after quite some time because of some people won't report the bug that a person found that want to exploit. I am sure that there are other reason which is that they already have found or hired a person to work for their casino which the job is to find bugs and find way to fix it and the casino doesn't have to reward every bug found since it is now a job for one or more than one person to find bugs.

That's one of the main reason too there's a chance they will not report the bug for the gambling casino instead they use this to make an abuse with the system and got a tons of profit and for the gambling casino too it's hard to trust if just only a normal people who make a penetration testing unlike hiring a bug bounty hunter with a contract there's a higher chance to get the system more efficient.

Still some of the platforms offering an open bug bounty to the community for their improvements and this will be well documented.

[Mahanton]

I said it would be not all people would really be doing that specially if he had able to make out money easily with those kind of exploits which he might able to make more money rather than on telling the team.
Thats if he could make out some withdrawal successfuly but most of the case whenever there are some unusual or shady activity, then the platform or site itself wont really be that dumb
on not to notice a players activity which it mind still end up on getting those funds to be locked up.Some doesnt really like on having those kind of advantage which ethically speaking,
which it is really indeed illegal and we dont really like to get ourselves involved on this type of stealing.

I think that's one of the reason why casinos didn't start bug bounties after quite some time because of some people won't report the bug that a person found that want to exploit. I am sure that there are other reason which is that they already have found or hired a person to work for their casino which the job is to find bugs and find way to fix it and the casino doesn't have to reward every bug found since it is now a job for one or more than one person to find bugs.

Unless if you do really like to flex out the security of your own site as an owner which you do run off some bounty publicly and prove out that no one could ever bypass their security.
Its true that why would really be needing to make some expense on running a bounty if you could just simply hire someone on enhancing your security and that would really be
charged in one go rather than on making some expense on running a bounty and this is why we cant really see someone who do really run this type of bounties
as of todays.There's no such thing about perfect security but there are experts who can really be hired in regarding on this manner.

[Johnyz]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Maybe because they hired someone to the penetration teating and have someone tested the site? I joined fortune jack bug campaign before and It's pretty fun because you will explore all of the function of the website and try to find bug from it. I'ved tried bug bounty once and I personally like it because it's fun and you can gain knowledge from the experience.

Hiring someone to monitor the site from time to time are more ideal if you are planning to stay longer, top sites have the team handling this one so maybe this is one of the reason why bug bounties are no longer active. I remember that fortune jack, and the usual bug are the graphic bug, or at least a missing letter which can easily only if you have the professional team. Bug bounties might not be effective that much, that’s why new site today choose not to have this.

[Fivestar4everMVP]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Luckily for them, they aren't always a target to the Hackers, Hackers only target crypto exchanges, I might be wrong though, so I am open to take corrections, but my opinion is based on the fact that since I got into crypto on 2016, I've not come across the news stating that a gambling site was hacked and a certain amount of money was stolen, all the news keep associating with Hacking is cryptocurrency exchanges.
So I honestly think that the non chalant attitude of crypto casinos on the discussion of bug bounty is solely because Hacking cryptocurrency casinos is not as common as Hacking  cryptocurrency exchanges.

[khaled0111]

I'm sure most casino owners do an alpha and beta testing (closed not open for everyone) before introducing their product to the public. Those testing phases are important and can help to identify some bugs and vulnerabilities so the devs can fix them. But it's not enough since testing the security of the platform (pentesting) must be a continuous job.
Although most casinos do not conduct bug bounty programs on this forum (except for fortunejack) , I recall seeing many of them posting their offers on bug bounty platforms such as hackerone.

[seoincorporation]

...
The better sites have a dedicated security team that works on security all the time of their site.

I don't think these engines have a security team... The security comes from the development of the site, so the coders must know about security and apply that knowledge while they code the site. And have developers on one side and a security team in other side is a big mistake, that must be done together.

[pawanjain]

May be the casino owners are hiring full stack developers who test their code as well develop it.
May be they would have hired Quality Engineers to test the complete site for UI and UX.
Reason might be anything. Besides that, if someone is really good at bug bounty they can find bugs from any site and just report it to the owner.
If the site owner would be generous enough then they would reward that person anyway.

This is always the case right now. Casino has there own employee to oversee the security of the casino due to the huge amount of money involved nowadays in the casino. They are now investing on security compared before that they do it by themselves with the help of this bug bounty hunter. I remember that some abused this before by attacking the casino and reported it as bug to claim rewards.

Nowadays those critical bug is already solved since most the games are now coming from 3rd party which has license and audit properly.

That is a good point actually. Many gambling sites are hosting games which are provided by a 3rd party.
So the hassle to maintain the code and security is gone from that perspective. This is a smart move though.
All they have to do then is maintain the integration and front end which is easy to maintain.
So the chances of bugs are less and may be that's why they are not hosting any bug bounties these days.

[abel1337]

Why aren't gambling websites using bug bounties to test-run their platform security? I haven't seen any gambling platform doing this, maybe that's why most gambling websites became prone to hacking? If I am wrong what gambling project do you think have the most secured system?, peace.

Maybe because they hired someone to the penetration teating and have someone tested the site? I joined fortune jack bug campaign before and It's pretty fun because you will explore all of the function of the website and try to find bug from it. I'ved tried bug bounty once and I personally like it because it's fun and you can gain knowledge from the experience.

Hiring someone to monitor the site from time to time are more ideal if you are planning to stay longer, top sites have the team handling this one so maybe this is one of the reason why bug bounties are no longer active. I remember that fortune jack, and the usual bug are the graphic bug, or at least a missing letter which can easily only if you have the professional team. Bug bounties might not be effective that much, that’s why new site today choose not to have this.

I guess it's a good way to introduce a new casino? It's true that hiring a professional help will be much more easier and efficient but I think fortunejack did before is to engage with the community especially that time, They introduced a new revamped casino. People try finding bug but unconsciously we found information about that casino and what it truly makes great. I guess it's effective since I remember it till now?

[khaled0111]

The security comes from the development of the site, so the coders must know about security and apply that knowledge while they code the site.

Nit necessarily true. You can be a good coder/dev but you still can make mistakes and write vulnerable codes. Besides, coders usually focus on delivering a working product and don't pay too much attention to security.
Another reason why you need to hire pentesters or white hackers is that not only the software can be vulnerable but also the server it runs on, the APIs it uses and even the project team members and the staff.

[capedbaldy]

Individual platforms has a way to do that to there safety so if you don't see bug bounty from casinos the. You need to understand that they have better ways they do check their site for better safety.

You are right, the casino will pay high if there is still a weak security problem because according to the team it has protected high security, but for low reputation casinos don't care about the bug bounty campaign because the casino is not aiming for the long term even some casinos are very vulnerable to use because they don't can withdraw funds again after the deposit.