no longer relevant, delete topic

[Saisher]

Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

You should If you have all the evidence to back up your claim, you can create a scam report instead of dropping here accusing Betfury of a different issue, this is a bug bounty issue, not a referral issue and your issue is not in any way related to bug bounty and you are promoting another casino here which is off topic from the issue that we are all discussing.

[Fivestar4everMVP]

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

[Hamphser]

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

If you are really that someone who do really loves on making up some back testing when it comes on finding bugs and exploits then there are lots of bounty sites on which you could really be able to test out your skills. For those who are really that trying out to bypass or making out some checking for some exploits on gambling sites and expecting something like some sort of bounty then it would really be that always better that you should really be talking or discussing if ever there would really be some bounty and not really just trying out to sue or ask our for some payments just because you have found something.
As long a certain site or platform didnt really announce for some bounty program then it would really be your choice because they can anytime ignore or reject out if ever you have find out some bugs or exploits.

This is why if you are really that serious when it comes to bounty hunting or bug tester or exploit then you should approach the site first or the team in speaking about this stuff
if ever you do able to see some holes or exploits then you would really be getting some bounty.Its better to ask out for some clarifications so that you wont be
wasting up your time and effort.

[Woodie]

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

I have been a bounty hunter, and AFAIK some projects took long to pay because marketing came first , then the sale, and then came the minting of coins depending on the sale and lastly the distribution and most hunters didn't understand this process and wanted to be paid upon the end of the bounty campaign but token sale was not concluded.

But with bug hunting,  these actually need to be treated with the urgency they deserve and seeing they have a dedicated email for such means someone is ready to look into such matters but if they dont honor their side of the deal shows how dishonest they are...besides the least they can do is acknowledge receiving the report to avoid such scam accusations.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

Whitehat hacker, whichever way you look at it you doing a great service for the project as they will nolonger be exploited.

[decodx]

I'm really sorry to hear Betfury screwed you over on that bug bounty situation.  That's so frustrating when you take the time to find issues and report them, but then they just deny your claim and  totally bogus.   

Bug hunting should be about working together to make things more secure. Companies ought to stand by their word when they offer bounties.  The least they could do is send an email saying they got your report, even if they don't think it qualifies for bounty.  Just basic communication and transparency.  Thats how you build trust and credibility.  Hopefully Betfury hears this and handles it better.  They gotta keep a good reputation in the bug hunting world.  It's a win-win when bug hunters and companies can help each other.  But pulling crap like this hurts everyone.

[Porfirii]

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

I have been a bounty hunter, and AFAIK some projects took long to pay because marketing came first , then the sale, and then came the minting of coins depending on the sale and lastly the distribution and most hunters didn't understand this process and wanted to be paid upon the end of the bounty campaign but token sale was not concluded.

Well, this is in part true, but Fivestar4everMVP was right when he said that bounty hunters should we aware that some projects in the forum won't keep to their word in the sense that some of them won't pay bounty hunters at all, not just that they will pay late or when their coin's value has gone down.

But with bug hunting,  these actually need to be treated with the urgency they deserve and seeing they have a dedicated email for such means someone is ready to look into such matters but if they dont honor their side of the deal shows how dishonest they are...besides the least they can do is acknowledge receiving the report to avoid such scam accusations.

I see bug hunting as a dual purpose offer from online services: on one hand, they avoid further exploitation of the bugs found by hunters but, on the other, it is a way to seduce potential black hat hackers so they don't go to the dark side.

Because most people like to think that they are good, and many hackers will prefer to get a lower reward in exchange of keeping their ethics intact. I don't think it is wise to break this powerful unwritten rule from the service side, but they will know what they are doing.

Anyway, as others said before me, it may be too soon to jump to conclusions.

[Kakmakr]

You know what you do in instances like this....

You exploit that bug.. until you acquire a lot more money than what they owe you for the reward, then you tell them to send you the reward or you keep the reward and you deposit the balance back to them.

I also reported a bug in a system for another casino and they never gave me a cent... they also say that they knew about the bug, but when I asked them why they did not fix it.... they simply stopped responding.  

[GxSTxV]

And now communication with support and screenshots. I sent them an email with a bug report on 10/31/2023 18:12 UTC +2. The rules state that the first response from support will arrive within a maximum of 3 days. 3 days passed, no one answered my letter. As a result, I wrote to the casino website for live support and said that I had not received a response within 3 days. And almost immediately I receive a letter from the casino that they have received my bug report and have only now forwarded it to the appropriate department. Really, the bug reporting department doesn’t check letters often and doesn’t read them right away if they contain important information about bugs? What we have, the report was sent on 10/31/2023 18:12 UTC +2, the bug was still working until approximately 10/31/2023 23:00 UTC +2, I watched this evening for a certain slot, which was the main one for the bug and it was removed approximately this time. Draw conclusions, they don’t want to give fair rewards for finding bugs.

Just like many users here said, It's the risk of bug hunters and to close this case BetFury casino representatives should clear everything about your case and have evidence that someone else reported these bugs before you. I can't say definitely that the casino just doesn't want to pay for your work.
It's only fair if we see a response from the other part. From what you said you are eligible to get paid, In the other hand, It's hard to believe that a casino of thus size will manipulate you and risk their reputation for couple dollars.

[Coin_trader]

Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

Do you contact already the support? If yes then provide their response to make sure that everything is clear on both side. You should create your topic about your case so that user can follow easily your case if you a real help from the forum. Betfury has a history for altering their referral commission without further notice. Your case is just different because they totally didn’t pay you. I’m interested t see what’s their reason since there’s no way that they will cut you off without doing anything against them.

LOL on BC. they have tons problem here too for not paying some user with their profit. BC also reduce their bonus rewards so I’m sure everything will slow down too on that casino.

[aioc]

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

You have a point bug bounty hunters will choose to do this if platforms like Betfury treat bug bounty hunters like this, yes they offer very high rewards to entice bug bounty hunters but when it comes to payment they are delaying it, some bug bounty hunters are already doing this, because they want to make sure first that they are getting something on their effort.
It is unethical for bug bounty hunters but if they keep doing this they will resort to this, finding bugs is not easy it takes knowledge, skills, and effort to find bugs so they should be rewarded, the platform will benefit if the bugs are fixed.

[coin-investor]

I hope Betfury will address the issue and they will eventually reward OP for his work we seldom read a complaint like this, Betfury is considered one of the top casinos here in the Crypto casino industry, and it will be a big turn-off for bug bounty hunters to read this kind of complaint.
They will prefer to shift to other reputable casinos or just exploit the bug knowing that they will not get anything from their hard work.

An issue like this will spread to bug hunters and coders they will leave Betfury as among the sites to work for bug bounty, I hope Betfury will come down here for an announcement that will satisfy everybody.

[bittraffic]

How much would it have been if they credited the bounty to OP?
It does need a very meticulous mind to become a bounty hunter and he could have abused these bugs if he wanted to but he reported it. I think its fair to get compensation for it.

Looks like it is hard to understand the images provided by OP but just wanted to say it is good to bring up the subject like this for other casino owners to learn from this kind of situation.

[Lanatsa]

How much would it have been if they credited the bounty to OP?
It does need a very meticulous mind to become a bounty hunter and he could have abused these bugs if he wanted to but he reported it. I think its fair to get compensation for it.

Looks like it is hard to understand the images provided by OP but just wanted to say it is good to bring up the subject like this for other casino owners to learn from this kind of situation.

According to these bugs, the reward reaches 50k, but I think this is for very serious reasons. According to my assessment of the bugs found, 4/10.

Where did you get that 50k as a reward? Do they tell you about on that matter or simply you are just making up some assumptions basing up on whats up into your mind?

I do agree into that point above that if the said exploit is really that something serious then it should really be that rewarded considering that you didnt really make out such abuse and for your own benefit
on which means that there are really that those people who doesnt really want to abuse something just because they've been seeing some hole into the system.
Its true that this kind of skills and knowledge isnt that simple and only a few could be able to know it out and this is why it is something that needs up some compensation or reward on the time
that having those kind of discoveries of such possible exploit.

It do really sucks that they wont really be giving out on the reward even if you do see that it is really that worth on getting some reward.
If the said platform had said about that it isnt something that rewardable then it do really sucks big time but well there's nothing we can do about it.

[Bitinity]

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

[coin-investor]

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

They should at least give proof that the bug was reported earlier by another bug bounty hunter and not just say that they know the bug and working on it already, bug bounty hunters will just suspect that they want to take advantage and do not want to pay, a mere thank you is not enough, I don't know much about coding, but based on what I read it consumes time and too much effort just to find bugs.

OP mentioned that he is not expecting big rewards so Betfury should get a hint and reward OP on what they think he deserves, and casinos should create a page or announcement about bugs for transparency purposes, so in case one bug bounty hunter finds one bug he can check the page if there's already a report on the bug.

[TimeTeller]

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

They should at least give proof that the bug was reported earlier by another bug bounty hunter and not just say that they know the bug and working on it already, bug bounty hunters will just suspect that they want to take advantage and do not want to pay, a mere thank you is not enough, I don't know much about coding, but based on what I read it consumes time and too much effort just to find bugs.

OP mentioned that he is not expecting big rewards so Betfury should get a hint and reward OP on what they think he deserves, and casinos should create a page or announcement about bugs for transparency purposes, so in case one bug bounty hunter finds one bug he can check the page if there's already a report on the bug.

That is true, should have valid proof about such claim, or better yet, they need to be clear about the rules of their bug bounty program.
Because if that is the case, then, you don't know if someone already reported such bug to them or not yet.
How will you know if they are saying the truth from their end? Though it is still their prerogative as they are the owners of the site.
It depends on how they will manage such program. But these hunters may not be encourage to report anymore, which has the possibility that they can just abuse such bug.

[darkangel11]

They are also looking for reasons not to count my report, for example: they claim that I submitted an application with a bug report more than 12 hours after my last check. I did the last test of the bug around 05:30 UTC +2 in the morning and went to bed until 15:00 UTC +2. I went about my business at home for an hour. It took me about 2 hours to prepare the bug report. The bug report was sent on the same day in the evening at 18:12 UTC +2. After the last test in the morning, I did not do any more tests in the interval of 12 hours. I wrote in telegram https://telegram.me/Steve_Betfury (head of betfury support) that I sent a rather serious bug report to bug and bounty support. Almost immediately after the report was sent, it was written to live support that I had sent a bug report from a certain email and they should check it, to which the first response was received to my report within three days. And betfury is trying to blame me for sending a bug report only 12 hours after the last test.

IMO this should not matter. What matters is if the bug was still there at the moment of submission. If it was, they should pay the bounty, or if there were multiple reports sent at the same time, a partial reward. I used to work in support and the way I'd handle this is as follows:
If your report was long after another report for the same bug and that first report went to a technician that's in the process of fixing the bug, I'd give you a redacted copy of that first report that included all the dates as proof that you were late.
If your report was sent at the same time (like within 1 hour) of another report by someone else, and both reports were sent before the technician was able to fix the bug, I'd either decide to share the bounty between you two, or pay something like 75% to the person who first reported it and the rest to you.

It's obvious to me they're not trying to handle it the right way and don't care about transparency.

[Broadanbig]

It’s strange to me that betfury doesn’t do anything and doesn’t try to resolve the case. I wrote to various managers and other people who run betfury and there was no response.

I found out in live support why there was no response to the case, they replied that the corresponding department had the weekend.

OP I think it was weekend as they have said so it would be okay to give them a benefit of doubt if truly they would act after the weekend then if they fail to respond them we  can conclude but for now let it be on assumptions that they are still on weekends. Although I have read your post and it is not making any sense that they could not attend to you for helping them to find such bug on their casino. It is awful of them to have acted this way.  I will call for your patience just for a little more time let us see how they handle the situation.

[Taskford]

It’s strange to me that betfury doesn’t do anything and doesn’t try to resolve the case. I wrote to various managers and other people who run betfury and there was no response.

I found out in live support why there was no response to the case, they replied that the corresponding department had the weekend.

OP I think it was weekend as they have said so it would be okay to give them a benefit of doubt if truly they would act after the weekend then if they fail to respond them we  can conclude but for now let it be on assumptions that they are still on weekends. Although I have read your post and it is not making any sense that they could not attend to you for helping them to find such bug on their casino. It is awful of them to have acted this way.  I will call for your patience just for a little more time let us see how they handle the situation.

I would like to believe that they will still meet me halfway. I generally like the betfury community, but in this case they have treated me dishonestly at the moment.

Well that's up for them if they didn't treat you fairly even if you settle up some things regarding on the bug you pointed out to them and if they don't really pay then didn't give a feedback or clear out such issue on this thread then maybe this will be the reason on why many people would lost their trust to them. They should really pay the bounty if there's promise stated to you and if this issue will prolong for another week or more then best to post a scam accusation for not honoring your deal between BFG team so that many could probably see your issue with them.

But still its good for them to settle.up and fix the bugs so that their gamblers will be more safe at away for any issues that might happen to them.

[khaled0111]

The fact that they didn't respond to your report immediately says a lot!
According to what you have said, those are critical vulnerabilities since they allow attackers to withdraw money. They should have taken your reports more seriously.
Saying that they didn't reply because it's the holydays is not an excuse, tbh. They should state in their bug bounty terms that you should expect to receive a response within three working days.