no longer relevant, delete topic

[markk1]

No longer relevant, delete topic.

[1715287428]

1715287428

[1715287428]

1715287428

[1715287428]

1715287428

[1715287428]

1715287428

[1715287428]

1715287428

[Sunderland]

- snip -

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

[Mahdirakib]

Draw conclusions, they don’t want to give fair rewards for finding bugs.

You are in a hurry to draw the conclusions. Did they inform you that they won't give any rewards to you? Maybe they have taken actions according to your report. But you should have reached their email support or the bug bounty team again instead of bringing the issue publicly. According to the BETFURY BUG BOUNTY PROGRAM:

You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.

[robelneo]

There's nothing on the communication that says that they are not rewarding you although 48 hours is what you think is enough time to get a proper response since you posted it here I'm sure they are now aware of it and will respond, it is not yet time to move it in the scam accusation unless they deny you of your reward even though because of your report they have patched the bug.

Have you followed the flow of communication when it comes to bug bounty report

If you find a bug, exploit or vulnerability, please report this to bugbounty@betfury.io. Describe the bug in detail with steps to reproduce and a full description. Also show the result of using this bug/exploit/vulnerability.
Here are details of the procedure and important points of the BetFury report flow:
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.)
The first response time from BetFury can take up to 3 days.
We check all points of your report within 1 week after the first response. After that we notify you about the test results.
If the bug is confirmed and reproduced, we try to quickly resolve the bug/exploit/vulnerability within 2 weeks after the first vulnerability was confirmed.
If the bug is not confirmed and reproduced or is already known, the BetFury team closes the case with no reward.
BetFury is obligated to pay the reward immediately after the bug/exploit/vulnerability was fixed.

https://docs.betfury.io/betfury-bug-bounty-program


I think you posted this too early.

[dimonstration]

The title and the content seems like not in sync. The title looks like there’s already a response from Betfury but the content doesn’t state anything about Betfury response on why they will not pay you aside from your assumption that they will not pay you just because their response is already exceeded to their target date.

The date they provide is just an estimated date which usually took longer than that in actual depending on the case you give to them. This kind of report needs further verification that took a lot of time. Please provide screenshot too about Betfury response on why they will not pay to make this thread complete information because your side is just one-sided.

[CryptSafe]

Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late but I see the bug you were able to find is very crucial one and as such they should accord you some audience and rewards. No one can tell why they have not responded to your bug hunt but I would advise you be patient a little  with them and see how they handle the situation.

I will advise you move this thread to reputation board as it does not belong here if I am not mistaken. I believe sending it there would also attract more reputable members to look into it and help you resolve your predicament with the casino.

[Smartvirus]

Your reports were made on the 31st of October, from what I read on the OP and that is barely 3days ago which makes your outburst way too early to consider any kind of trouble.
There are chances that, it might have been offered a previous reporter but, looking at the time frame between bug reports and having it fixed which is barely hours away, I can’t say there is a possible coincidence between having any previous reporter before yourself.

The probability to delay might be that, there are procedures to having these rewards handed out to bug hunters and you might as well give them a well enough time to handle the issue while, writing to support after a lofty time that could translate to neglect.

Meanwhile, have you tried sending a pm to their forum representative? If no, you could do that and hope the user might represent your interest in this regard.

[coolcoinz]

Hello! Betfury will not pay the promised bounty for bugs found. I found bugs in Betfury by logically calculating the operation of the system.

A total of 4 bugs were found. The first report was made about six months ago and then I was denied a bounty, citing that the bug had already been closed before my report.
Bug was with a bonus for registering 100 free spins, which allowed, after spinning the free spins, to receive bonus money to the main account and you could immediately withdraw it, with certain manipulations.

What does it mean that the bug was closed? Was it there when you reported it? I'm asking because if it was reported by someone else, but not fixed before you reported it, they should at the very least give you some small reward, like a casino bonus, free spins, or something like that.

What if all companies that put a bounty on bugs acted like this? Each time someone reported a bug they'd say that it's too late because they found it themselves, thank you for your service you sucker.

Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?

[CryptSafe]

Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?

Not really though but you know casinos sometimes act funny when such happens  and if they do not want to reward bug hunting, they start telling you that the time for such elapsed and sometimes they tell that someone else already reported that and they are on the verge of rounding up with the work on the bug before you noticed it all these you know just to keep away but I think it should be looked into as well to minimise the occurrences of bug hunting with no rewards.

Sometimes they claim the time for the bug hunting elapsed but the bug discovered is the type that could cause a big wreckage if it has not been discovered yet and I think if that should be the scenario, they should be able to reward whomever discovered such bug because that person just saved them of a possible lapses that could cause them a whole lot in the future irrespective of whether they have an ongoing bug hunt rewards or not.

[milewilda]

Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?

Not really though but you know casinos sometimes act funny when such happens  and if they do not want to reward bug hunting, they start telling you that the time for such elapsed and sometimes they tell that someone else already reported that and they are on the verge of rounding up with the work on the bug before you noticed it all these you know just to keep away but I think it should be looked into as well to minimise the occurrences of bug hunting with no rewards.

Sometimes they claim the time for the bug hunting elapsed but the bug discovered is the type that could cause a big wreckage if it has not been discovered yet and I think if that should be the scenario, they should be able to reward whomever discovered such bug because that person just saved them of a possible lapses that could cause them a whole lot in the future irrespective of whether they have an ongoing bug hunt rewards or not.

It do really sucks on such case on which there's no way on knowing that they are really that indeed truthfully telling whether its been already discovered by someone or simply making out some alibi just because they dont really like to pay up the bounty reward on someone who had discovered. Somewhat there are really those exploits or bugs which are worth to be paid off with some bounty and there are ones which are really that very minimal or something  not really that worth on getting some rewards but to those people who are really that optimistic about  getting it then they would really be having that kind of self entitling that they are really that worth on getting paid up even if its not really that right anymore. Im not really that a technical guy who do really knows on whats the real negotiations or set up about bounty  about on bugs but basing up on common sense on which on the said bugs that been mentioned then it would really be just that ethical that they would really be that needing to reward someone who do discover some serious bug which it could be possibly be exploited and could really be that abused which in result into huge effect into their revenue. They should at least showing up some rightful act if its worth to be given some bounty or not, or not really just
that simply trying out to ignore basing up on whats been discovered.

[iv4n]

If you think BetFury screwed you with this, then you should put everything in the scam accusation thread! This post leads to nothing, whether you accuse them of something or not. It's not clear to me specifically what you found, what you sent them, and what kind of answer they gave you... but certainly, if you think you have been harmed, start a scam accusation topic and that's it. With all the evidence you have, and maybe then I would trust this.

I saw your post in their ANN thread, but I am not convinced about your story. Maybe I am wrong, but you should provide more info if you wish to prove your case!

[CryptSafe]

Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?

Not really though but you know casinos sometimes act funny when such happens  and if they do not want to reward bug hunting, they start telling you that the time for such elapsed and sometimes they tell that someone else already reported that and they are on the verge of rounding up with the work on the bug before you noticed it all these you know just to keep away but I think it should be looked into as well to minimise the occurrences of bug hunting with no rewards.

Sometimes they claim the time for the bug hunting elapsed but the bug discovered is the type that could cause a big wreckage if it has not been discovered yet and I think if that should be the scenario, they should be able to reward whomever discovered such bug because that person just saved them of a possible lapses that could cause them a whole lot in the future irrespective of whether they have an ongoing bug hunt rewards or not.

It do really sucks on such case on which there's no way on knowing that they are really that indeed truthfully telling whether its been already discovered by someone or simply making out some alibi just because they dont really like to pay up the bounty reward on someone who had discovered. Somewhat there are really those exploits or bugs which are worth to be paid off with some bounty and there are ones which are really that very minimal or something  not really that worth on getting some rewards but to those people who are really that optimistic about  getting it then they would really be having that kind of self entitling that they are really that worth on getting paid up even if its not really that right anymore. Im not really that a technical guy who do really knows on whats the real negotiations or set up about bounty  about on bugs but basing up on common sense on which on the said bugs that been mentioned then it would really be just that ethical that they would really be that needing to reward someone who do discover some serious bug which it could be possibly be exploited and could really be that abused which in result into huge effect into their revenue. They should at least showing up some rightful act if its worth to be given some bounty or not, or not really just
that simply trying out to ignore basing up on whats been discovered.

Truly some casinos do act up whenever they do not want to pay up for bug discovered by their users. Maybe a minor bug which can be understandable but at least there are some bugs that seems threatening to the casino that to should be rewarded whether there is a bug bounty or not, those users who discovered them should be appreciated and rewarded because what they have done have saved such casino the unforseen danger they could have encountered in the nearest future but have been averted by a good Samaritan who has the casino at heart.
The idea of rewarding bug finders should not be swept under the carpet because those bugs discovered could have been loopholes by hackers to make their ways into the entire system to commit their crime.

In all, bug hunters or finders should be appreciated and rewarded for their work because what they do is not as easy as one of thinks it is.

[Stalker22]

OP, did their bug bounty department get back to you after they asked for more details and the exact steps used to recreate the bug? Just because they havent hit you back yet doesnt automatically mean they will reject paying you for finding the bug.  They might still be reviewing your bug report. Id give them a bit more time before assuming they are gonna deny your bounty claim.  But definitely follow up if its been more than a few days with no response and dont let them ignore you if you put in the work to find a legit bug!

[avp2306]

How many days pass since you made this report? If they are ignoring you for couple of weeks with no sign that you will be take care of after those report then maybe they are start avoiding.

But if it just take for couple of days then try to give them sometime to review if they find your report a serious matter since it may take time for them to review your report so much better to wait an update coming from them. Also this post is not meant to be posted here so maybe I guess this belong to reputation thread and after they are not totally responding and didn't give your bounty then maybe this belong to scam accusation.

[robelneo]

There's nothing on the communication that says that they are not rewarding you although 48 hours is what you think is enough time to get a proper response since you posted it here I'm sure they are now aware of it and will respond, it is not yet time to move it in the scam accusation unless they deny you of your reward even though because of your report they have patched the bug.

Have you followed the flow of communication when it comes to bug bounty report

If you find a bug, exploit or vulnerability, please report this to bugbounty@betfury.io. Describe the bug in detail with steps to reproduce and a full description. Also show the result of using this bug/exploit/vulnerability.
Here are details of the procedure and important points of the BetFury report flow:
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.)
The first response time from BetFury can take up to 3 days.
We check all points of your report within 1 week after the first response. After that we notify you about the test results.
If the bug is confirmed and reproduced, we try to quickly resolve the bug/exploit/vulnerability within 2 weeks after the first vulnerability was confirmed.
If the bug is not confirmed and reproduced or is already known, the BetFury team closes the case with no reward.
BetFury is obligated to pay the reward immediately after the bug/exploit/vulnerability was fixed.

https://docs.betfury.io/betfury-bug-bounty-program


I think you posted this too early.

At the time of sending the bug report, the bug was still working for at least a few hours. If it weren't already working, I wouldn't have sent the report.
A total of 3 bug reports were sent. Two bugs worked 100% with bonuses, about the third bug they told me that they knew, but apparently they know and it works.

I'm not saying that the casino as a whole is bad, the crux of the problem is the reward for finding bugs.
Let people know what difficulties they may encounter when submitting bug reports.

I'm not defending Betfury, you posted that it will not pay when according to the terms on their bug bounty program page there is a time element involved before they can be obligated to pay the rewards by posting and using the word

will not pay

you assume that they are not gonna pay, I think its not fair
for Betfury let them do their investigation first and if there is no action on their part based on the time they allocate then you can file an accusation.

You deserve the bug bounty rewards of course, but follow what's on their terms and do not assume right away that they are not going to pay.

[erickbtc]

Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

[BitcoinPanther]

OP, did their bug bounty department get back to you after they asked for more details and the exact steps used to recreate the bug? Just because they havent hit you back yet doesnt automatically mean they will reject paying you for finding the bug.  They might still be reviewing your bug report. Id give them a bit more time before assuming they are gonna deny your bounty claim.  But definitely follow up if its been more than a few days with no response and dont let them ignore you if you put in the work to find a legit bug!

It looks like @OP had a trauma of not getting paid with the discovered bug.  @OP stated that the first bug he find was way back six months ago and he was denied of payment.  Now he discovered 3 more bugs and informed the casino, and yet @OP feels like the casino won't be paying him again thus he get so eager to make the community in Bitcointalk to know about his case.  I would not blame @OP but I agree that it is too early for this thread to accuse Betfury of not paying you again.  This may even trigger Betfury to deny you of payment since you breach some condition in their Bug bounty terms.

If ever, Betfury failed to recognized your contribution and failed to pay you, you can always create a topic on the scam accusation board of this forum.

[pinggoki]

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

Why did they ask for how the bug was found then if they already had done it themselves? Wouldn't they emailed OP that they've already found it and that they were sorry that OP was too late for the report? But in the screenshots of the email, there seems to be no indication that they got to it first or that someone got to it first also your assumption that there's a lot of bug hunter for Betfury isn't absolutely right, what if that's how a lot of other bug hunters think that they didn't bother trying to hunt for Betfury which ends up with Betfury having less hunters than expected.

[Agbe]

- snip -

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

You have explained everything well for the op to understand so it is left for him to continuingly asking them to know what is the issue from what he has said and and your explanation, I don't think there is no scam related matter here. And if another user has reported the bug before Op they have to tell that, it has been reported before you. And Op too allow them to make a research (investigation) about the case now that you bringing it to their noticed. Probably you were not the only person submitted it so they have to cross check all.

[Z390]

This is not a scam related issue, take it as a lesson and move on, this is one of the difficulties that bounty hunters used to face.

Firstly, know that you are not the only bounty hunter chasing the bounty, and they have their rules that it's first come first served, if you want to be a successful bounty hunter you need to work harder and faster, to beat other bounty hunters at their time.

I have a friend who is also a bounty hunter who likes finding bugs for companies and projects, he have to join multiple bounties before one or two pay him what he deserved, most times they always fail or some other lucky bounty hunger beat him to the prize with time.

Some platforms are well organized, they always give reasons why they may not pay up even if you find a bug and they will give details on how many bug finders they will pay, so even if 20 hunters are on this maybe only 3 will be selected, this is one of it's disadvantage.

What I believe that Betfury may have some wrong is keeping it to themselves after someone already found a bug, they should have a email alert in place that will notify all the bounty hunters and they will stop working on their bug finding journey.