Crypto Gambling Sites and Bug/Exploit Reporting and Rewards.

[ethereumhunter]

It's normal for casinos not to immediately take care of or fix bugs in their system for days because the casino claims they already know about it and are making repairs. But whether they are still delaying the repair or fixing it immediately, we won't know. If the casino hasn't fixed the bug we reported, it means that they are taking security issues lightly, which should be a priority for the casino so they should immediately check it and fix the bug if their security team finds it. But I think there must always be alert casinos, especially if someone finds a bug in their system so they will immediately check and fix the bug so that other people can't use it.

It depends on the casino because if they think the bug is not too dangerous, maybe they can work on it slowly while looking for other bugs that might be more harmful to the casino. Apart from that, casinos also depend on the security team they have in checking for bugs. If the security team can fix the bug immediately, they will fix it immediately.

[1715522157]

1715522157

[1715522157]

1715522157

[coin-investor]

Would you mind sharing with us the names of those "several casinos"? Perhaps a little bit of negative marketing would force the owners of those casinos to do something about it and solve the bugs/exploits.
I don't mind having a publicly available list of crypto casinos, that currently have bugs. Such list will definitely force the casino owners to improve their websites.

I don't think OP will not divulge the names of these casinos, they will just deny it and it will become a he said they said scenario, casinos don't want to be put in this kind of scenario where they have to defend themselves when it comes to security.
Website security is a serious thing casinos can easily lose their reputation and OP needs to back up his word if the bug is already fixed OP will be in a bad situation so let's just be aware that some casinos are like this, they do not want to put a bounty page, it's their prerogative after all.

[danherbias07]

That first one is true. Most of the time it will be the gamblers who will experience the bug after playing for a lonng time. When they report it to the mass chat and moderators will see it then they will say it is being attended, so it gives a freebie to the gambling site where they should be paying after that report. You are right about online gambling business taking care of it without any ruckus and it sucks for the one who saw the mistake because none will be gave to him and it will be fixed like nothing happened.

Imo, they should give more if one user finds it because it will lessen the payment unlike hiring a pro to keep on looking for erros while in the end they cannot even see it. .

[darewaller]

If the bugs aren't that serious or game-breaking, I doubt they'll ever put so much attention to it. There are other things that they need to put their attention to, and minor bugs aren't one of them. My take: leave minor bugs as is and exploit game-breaking ones before submitting it for review. At least, you already profited from it and you have demonstrated that the bug is too critical to be ignored.

If you are already profiting from it, I don't think it will be easy for you to surrender the exploit but it's never too late to be a good guy. Maybe some will did it if they can't sleep peacefully at night. Small bugs are easy to spot and the ones that will report it in the hopes of getting a reward are the normal users.

I tried it actually and you are right. It seems the casino didn't care much about them because they just ignore my message. For those who have an exceptional skills in the IT field, they will always go for the major exploit because they know that the reward for them are huge and maybe they will exploit it first if they are a little greedy.

[dezoel]

This type of transparency will benefit everyone. Users will be more safe with extra testing. People who find exploits are less likely to exploit if they know they can be compensated for the find. The industry overall will benefit from this.

Casinos and exchanges should have a bug bounty, one of the main reasons is they already have a dedicated team for this and the administrator is paying these people to fix bugs and patch and if they post that they have a bug bounty they will be targeted by hackers for exploits because hackers will think that they do not have an internal security to fix exploits.

Casinos and exchange especially the big one will only test for security flaws and bugs prior to their launching and from there they are going to monitor the script or theme for possible exploits so if there is a bug it will be fixed soon by their team or the casino will suffer from too many glitches because of failure to fix the bugs.

That's interesting but I think I still see a lot of websites who have a bug bounty or sometimes called a feedback reward which I think can work the same according to their description. Most of these sites are not really that well known and as for the ones who are already at the top, I think they already done a lot of upgrades and their system is already at a good condition. That may be the reason on why they don't offer a bug bounty anymore.

IDK if it was the OP but I saw a thread last time which the user said that the his bug reports are only being ignored by the casino. We are not sure if they do, or maybe they already take note of the message and fixed it, but the user must be compensated.

[BIT-BENDER]

Well you are right mate, many exchanges fail to check how strong they are against attacks like hacking and also many of the gambling platform don't do regular maintenance to prepare themselves or correct any bugs that may hinder the free flow of activities on the platform.

But the Truth is that the gambling platform and even exchange sector has many options for consumers to choose from, I think the users also has a part to play in all this, before selecting any gambling platform is best to do your own research, check how trusted and fair they are, check the rating on such platforms and the history (if there has been any attacks, bugs and how the platform has handled such situations).

[noormcs5]

IDK if it was the OP but I saw a thread last time which the user said that the his bug reports are only being ignored by the casino. We are not sure if they do, or maybe they already take note of the message and fixed it, but the user must be compensated.

There can be a number of reasons why the gambling site may ignore any bug reported by the user. Because they have no clue how to fix that bug, they can ignore the site bug. Sometimes the gambling site won't even start a big bounty, because they do not want to make their shortcomings public or have no resources/skills to fix them.

Regarding the reward to the user who reported the bug, if he reported voluntarily, the gambling sites are not bound to pay him.

[Silberman]

That's interesting but I think I still see a lot of websites who have a bug bounty or sometimes called a feedback reward which I think can work the same according to their description. Most of these sites are not really that well known and as for the ones who are already at the top, I think they already done a lot of upgrades and their system is already at a good condition. That may be the reason on why they don't offer a bug bounty anymore.

IDK if it was the OP but I saw a thread last time which the user said that the his bug reports are only being ignored by the casino. We are not sure if they do, or maybe they already take note of the message and fixed it, but the user must be compensated.

The sad part about all of this is that if casinos, exchanges and any other similar business that deal with cryptocurrencies listened to their users this could be avoided, however it is true that many of those entities choose to ignore bug reports, which allows some hackers to take advantage of those vulnerabilities, steal a lot of money and then claim a huge bounty they can keep legally, when the problem could have been resolved for a tenth of the price they will have to pay at that point to that hacker.

[rohang]

I will not name names  but I have reported multiple exploitable line issues to different  sportsbook (very popular ones)  and have not  received any reward whatsoever.

They were usually bad lines i.e.  late odds or slow to  update live odds, they were pulled as soon as  i reported and i got a 'thanks'

Never did it again