Finding a Bug

[Sling0]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

[1715607878]

1715607878

[1715607878]

1715607878

[1715607878]

1715607878

[seoincorporation]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Most casinos would pay a bug bounty if the bug is critical, you should contact the support on the site and ask for the right way to report the bug, maybe the site has an special mail for that.

And remember, if you exploit the bug your account will be closed and you will not get a bounty, that's why is important to report it as fast as you find it.

[Eternad]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should check first with the support about their terms about bug bounty since not all casino rewards user that report a bug especially if it’s not that critical. There’s many incidents here that casino decline payment because they “fix the bug” right after the user reported it and claiming that they are onto it before it was reported.

This is why you should record everything as proof before you report it to the support once you confirmed that they have bug bounty program.

[Wiwo]

First what is the casino's stance on bug because as far as I know,  some casinos declare a bounty on bugs and if anyone fines those bugs them you get your payment,  but if the casino hasn't declared a bounty it may be hard to get something out of them,  best you can do in that situation is just to approach the casino and inform them of the bugs.

Sometimes there are cases of gamblers taking advantage of those bugs and along the line, the casino may deny them their winnings.

[electronicash]

First what is the casino's stance on bug because as far as I know,  some casinos declare a bounty on bugs and if anyone fines those bugs them you get your payment,  but if the casino hasn't declared a bounty it may be hard to get something out of them,  best you can do in that situation is just to approach the casino and inform them of the bugs.

Sometimes there are cases of gamblers taking advantage of those bugs and along the line, the casino may deny them their winnings.

maybe ask first if they pay users who find bugs. asking for the fee before revealing the bug i think will make sense, just make sure the bug is critical and can affect the profit of the casino.

it's hard to do this however because for you to be able to know it's a critical bug you have to exploit it as well. and then if they find out you exploited to gain then you will not be paid. this is a dilemma. 

[Sling0]

Thanks for the reply all. I did contact support and let them know of a possible issue but before I went farther I wanted to make sure because I didn't really get a commitment to a bounty pay. I'm not the most tech savvy but so if I can get it to happen someone who knows what their doing can be rich. Maybe

[Potato Chips]

Thanks for the reply all. I did contact support and let them know of a possible issue but before I went farther I wanted to make sure because I didn't really get a commitment to a bounty pay. I'm not the most tech savvy but so if I can get it to happen someone who knows what their doing can be rich. Maybe

Perhaps, try to look for a dedicated page for bug bounty or an announcement. Also, I think if it's a reputable casino, there's a good chance, people have discussed about the same thing in a gambling message board.

In any case, it will be up to discussion and you'd have to wait for the casino in question's answer -- whether they're willing to reward people for bug tip-offs and if your case does qualify for it.

[Sling0]

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

[JeromeTash]

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

I do hope they hear you out or at least pay you handsomely for the bug. Some brands are so mean when it comes to paying out bug bounties yet if the person inside decided to exploit the bug, they could cause some reasonable loses to the service.

I saw a scenario where a service refused to listen to someone who had discovered a bug, claiming they had no bug bounty. Some months later, a bad act discovered the bug and exploited it. The service suffered huge losses as a result.

[BitcoinPanther]

As far as I know casino who wanted to reward its users to find a bug had it in their program.  If bug is found by the user, they need to report it to the support staff then the support staff will forward it to the technical team for verification.  The casino who is true to their words to reward users if bug were found will surely reward the person who found and reported the bug but there are some instances where a player reports a bug and yet the casino do not reward the player saying that it was already found out or they already know the existence of the bug.

So it is 50/50 for the player that reported a bug to get rewarded.

[Hispo]

-

I do hope they hear you out or at least pay you handsomely for the bug. Some brands are so mean when it comes to paying out bug bounties yet if the person inside decided to exploit the bug, they could cause some reasonable loses to the service.

I saw a scenario where a service refused to listen to someone who had discovered a bug, claiming they had no bug bounty. Some months later, a bad act discovered the bug and exploited it. The service suffered huge losses as a result.

Hopefully he will get some bounty if the bug is actually critical or have some relevance, but let us be honest, in the most of the times when comes to security and claiming bugs developers and white hat hackers are not only supposed to find the bugs and disclose them to the services/casinos in a responsible way, but have good enough communicative skills for them to explain what the bug/exploit is about and what could have happen have not they figured it out before a malicious actor.
Since I am pretty sure costumer service does not have any power to grant money to people who find bugs or exploits, they will likely transfer the case to the security department, and from the security department to some administration to decide whether the problem found deserves some money as compensation.
Sadly, sometimes the compensation of these kinds of situation highly depend on someone who handles some of the money of the casino and has no idea about coding or security. If one is not able to convince the security staff of the gravity of a exploit, it is very unlikely the security employee will end up convincing the one person who is supposed to approve the reward . 

[MainIbem]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

If you find any bug in casino and you report the bug they won't pay for it but rather will make adjustments, except they set a bounty for it before you could be paid for the bug you find. There are proper ways of reporting bugs and you need to submit using the formats the casino night provide on their bug bounty report, otherwise except they wanna reward you for the time being maybe it could from the technical team or something so.

[iv4n]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Well, it's hard to be ethical here... finding a bug should get you a reward, but not all casinos have a "bug bounty". So before you report some bug try to speak with their support and if they can refer you to some admins. Before revealing your cards try to talk about it, and maybe you can get something in return. Sadly, not all casino owners/managers are fair. So if you share what you know with them before any deals you can stay without any reward.

[acroman08]

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).

[Wiwo]

maybe ask first if they pay users who find bugs. asking for the fee before revealing the bug i think will make sense, just make sure the bug is critical and can affect the profit of the casino.

it's hard to do this however because for you to be able to know it's a critical bug you have to exploit it as well. and then if they find out you exploited to gain then you will not be paid. this is a dilemma. 

Most of the casino already have a fixed amount when they announce a bug bounty and some time it fixed and if the gambler who found the bug is verified not to have exploited the bug before reporting the bug and also,  casinos pay well for bug bounty since it helps them to save losing huge from such bug.

So it settled deal and the casino stands to benefit more from this than the gambler himself, The majority of the bbugsa left unnoticed for a while and that has led to the collapse of many casino platforms.

So to avoid such incidents, casinos will pay a good amount to make sure they operate without bugs availabilities.

[ultrloa]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

If there's a running bug bounty campaign on a casino then contact the representative about bugs you find out and for sure you get rewarded. But if they don't have any and still you find out something that can possibly affect their user then try to reach up their support then tell what you discover then ask about possible rewards about the but you had notice. If they are generous to reward you about things you find out then its good but you also need to know that this will depend on the severity of  the bug you found since if they find it not so big then you might not get any rewards.

But still give a shot to discuss this matter to them since for sure they might take a look on the reports you made since for sure they value more the security of their casino.

[Quidat]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

They arent accountable not unless if they do make out some bounty program or having those announcement on having that reward if ever there's some exploit discovery.
This is why it would really be that depending whether you would be getting paid or not once you do report a bug. Most of the time if people find out some exploit
and this does really increase out the chance for them to make money then for sure it would be spoiled but for those who are minding about being ethical and honest
then reporting it out immediately. Results might be given some bounty or not depending into their discretion then it would be just better that you should not expect too much on this regard.

[Slow death]

Thanks for the reply all. I did contact support and let them know of a possible issue but before I went farther I wanted to make sure because I didn't really get a commitment to a bounty pay. I'm not the most tech savvy but so if I can get it to happen someone who knows what their doing can be rich. Maybe

I advise you to do the following: if the casino where you found a bug is a casino that is on this forum, then when you contact the casino and tell them that you found a bug and they tell you to first show them where is the proof of this, so you tell them that you will provide proof to some trusted members of this forum (DT members) and that these members will confirm to the casino that you are telling the truth, after that the members will show the casino a part of the proof and you are constantly monitoring the bug so that it is not fixed after you have shown the proof and they do not pay you, if the casino really has a reward for anyone who finds a bug in the casino and they do not pay you

then you could file scam charges against them. Now if the casino does not have any bug bounty program then you cannot contact the casino saying that you discovered a bug and want financial compensation for your discovery, you can alert the casino about the bug but without asking for financial compensation. But if the case has compensation for those who find a bug, avoid negotiating alone with the casino because they can deceive you and you won't receive anything and you won't be able to prove anything, I've seen a case here on the forum of someone who discovered a bug in the casino , he alerted the casino and sent proof and the casino fixed the bug and did not pay him anything and as the person negotiated alone he did not have witnesses to confirm that when he discovered the bug the casino had not fixed it

[tabas]

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

If that has been found for the very first time then I think that you will be compensated for it but then, they can always claim that it has been reported before and they are just taking time for their actions to be made and fix that bug you have found. Since it is holidays, very few working force and many probably are on leave to cater that bug. Means that they can void it and say something like that but I just hope that you will get significant bounty for it and good luck.

[Sling0]

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).
[/quote

BC Game. I messaged them on here yesterday but no response

[vennali]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Completely depends on what can be exploited from that said bug. Can a customer/player win more than he normally would(exploiting). In that case, the casino would pay bounty. If its a bug that lets casino earn more? I guess they'll just refund you the money wagered(individually) and maybe fix it.

[yahoo62278]

If they do not offer a bounty, will you still report the bug is the question? Most sites will offer a bounty but like others said, it depends on the bug.

I would report the bug either way.

[Sling0]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Completely depends on what can be exploited from that said bug. Can a customer/player win more than he normally would(exploiting). In that case, the casino would pay bounty. If its a bug that lets casino earn more? I guess they'll just refund you the money wagered(individually) and maybe fix it.

Customers would absolutely exploit it for profit if not already. I don't believe it's a bug that has been reported before because it would result in major loss. I have reported it to support and my host did say that I would "probably" be compensated depending the bug. I just hope that doing the right thing was the right move and they see the severity. Fingers crossed

[bitterguy28]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

I
It is generosity and not obligation , the casino site should give bounty for Bug reporting because this will help their business go further but you cannot force them to do so , meaning this is about  either the site is generous or selfish .

Better ask their team first  so you can expect something in return after reporting , and if they deny paying then don't sent the report but for me personally ? if i found bug in a casino specially those one that I am playing?  reporting is not a big  case for me as long as this will help improving the site i trusted .
and to prevent more abusing and progress will go further to this site i  trusted.

[terciduk123]

If you find a bug in a casino, all you need to understand is how much loss the casino will gain if the bug is known to others, or what profit the user will get if he finds the bug. Once you find out you can contact the casino admin or send an email to support to ask if the casino has a reward for the bug seeker or not. If so, usually the reward varies depending on the bug you find. Otherwise, you can use the bug for yourself, LOL

[rodskee]

be a Good human , Help the site find that bug and if they send you cash then thank
you but if not then just think of it as a act of kind since this is New Year mate.
also if you think they are not paying then leave it, let them find that bug so you have no problem.

[Assface16678]

Well it depends on the casini itself, some casini already hired someone with expertise in the field of information technology (IT) that will exploit the things that are vulnerable in the specific website, this persons or IT persons are classified as hackers but in a good side where in they will find the vulnerabilities of a website and will report to the owner to fix this issue, sometimes even the hired hackers are the one that will fix thr issue. But if a casino website is generous then if an a regular customer reports a bug or vulnerability in a website then they can give a reward to that customer either funds to the casino or money itself.

If you are aiming to be hired as a bug hunter or vulnerability tester, or tester itself then it will take some degree to do so because why would a website will hire someone that has no degree or proof of expertise in the said field.

[noormcs5]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

A casino can pay a tribute in the form of money to the person telling them about the bug about the casino site but they are not bound to pay. It is only for the good will if they pay but you cannot demand anything and i would suggest not to even expect a reward for it.
This is different from the bug bounty where the casino announces to find the bug in their site and they are bound to pay for it.

If you find a bug in a casino, all you need to understand is how much loss the casino will gain if the bug is known to others, or what profit the user will get if he finds the bug. Once you find out you can contact the casino admin or send an email to support to ask if the casino has a reward for the bug seeker or not. If so, usually the reward varies depending on the bug you find. Otherwise, you can use the bug for yourself, LOL

Lol, this can be called as Black mailing as i know the bug in your site, pay me reward else I will exploit it   
The casinos won't pay in advance because then everyone would be emailing the casino support team even if they do not have any big to report.

[DabsPoorVersion]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

One way to address the issue is to report it to the customer support of the website. It's essential to provide them with the necessary information and evidence of the bugs you have discovered. It's worth noting that not all online casinos offer bug bounties, so I'm unsure whether the website you're referring to has one.

You can ask the customer support team if they have a bug bounty program and inquire about the rewards that come with it. In some cases, you may be given a bonus play or a cash prize that you can use or withdraw.

[Oilacris]

If they do not offer a bounty, will you still report the bug is the question? Most sites will offer a bounty but like others said, it depends on the bug.

I would report the bug either way.

If there would be no bounty or reward then people would really just simply ignore or would really just moved on and dont mind but on the time that they do saw that they could really be able to benefit out then they would really be taking advantage of it.If there's bounty then there's no doubt that they would really be reporting it but it would really be just that depending on a certain individual.
Sites cant really be perfect on which there would really be those kind of flaws or errors on code and this is why you would really be that able to experience it out
but most likely sites wont really be having those kind of issues because once they would really be launching up their site, its already that polished.

[michellee]

If you know the casino is holding a contest to find the bug, you can report it to the support service. After that, the casino will select the most critical bugs and award them a prize. That could be the casino's assessment criteria.

But if the casino doesn't have a bug finding contest, we won't be able to get the prize because the casino doesn't ask its members or anyone else to look for bugs in the casino. So first, ensure the casino is holding a contest to find those bugs.

But if the casino is kind, the person who finds the bug could be rewarded. It depends on the kindness of the casino. We can't expect much.

[Eureka_07]

be a Good human , Help the site find that bug and if they send you cash then thank
you but if not then just think of it as a act of kind since this is New Year mate.
also if you think they are not paying then leave it, let them find that bug so you have no problem.

There's no need to pressure him of that "be a good human" phrase. Let him decide, it is not his responsibility too. If ever it it really an important bug to be fixed immediately, I think that the casino should consider compensating him for the effort he did, if and only if he didn't exploited it beforehand.

It is still depend to both party if one would choose between to let the casino know or not. And if the casino would compensate or not. I'm sure though that the casino will give some reward if they think that the issue is major or critical.

[arwin100]

The best thing you can do if you find a bug on some casino is to send a private message to officials of that casino then negotiate about something you find in their casino since if there's huge threat especially on data leaking of platform penetrating which can cause a financial loss to them for sure they will do their own diligence to reward what you report to them.

But if you find out some minor bugs then I guess its up for them to decide if they reward you but if not still don't feel bad about it and still report what you have been found since you could just think about the safety of the people using that casino and their will be no interference gonna happen to them. But still as said for many times its up for the casino owner or officials to see if your bug report is worth to get rewarded since they are the one who can determine the severity of the bug you found.

[coin-investor]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should first check if the casino where you are reporting the bug if they have a bug bounty if there is one they will redirect you to that page where you can read the terms, the rewards and how to report the bug report, just be sure that you are working on a reputable casino, there have been report of casinos that deny rewards on bounty reports, because they classify it as already resolve or the bug bounty hunter already exploited to buy to profit, they do this to deny payment to the bug bounty hunter.
Bug bounty hunters is not an easy job so they deserve rewards when their reports are valid because they can potentially lose a lot of money if the bug is not resolve.

[SmartGold01]

Reporting a bug is something very important to newly launched casino and there should be compensation for it however, there is always a time of agreements between users of the site and the owners of the site sometimes you could be required to find those bugs and if you find any then you may report to them to get compensated. Like what others already said before reporting any bugs finds in casino you should be able to reach an agreements between casino operators before revealing those bugs otherwise they wouldn't want to reward for the bugs you find from their casino, meanwhile I suggest you should reach out to them before reporting any of the bugs finds out if they don't set any bug rewarding program.

[Wiwo]

If they do not offer a bounty, will you still report the bug is the question? Most sites will offer a bounty but like others said, it depends on the bug.

I would report the bug either way.

Yeah much better to report the bug at the point of detection regardless if the casino offers a bug bounty or not,  I think it is the responsibility of the gamblers to report bugs this is for the betterment of boplayers'r's winning safety and also the casino who may lose money through bugs abuse by gamblers.

We had a situation that resulted from bug abuse in one local gambling site in my country,  the reports from the players state that the gambling site refused to pay them their winning and they decided to come on social media to call them out,  but in responding to that,  the casino statement says that the bets were won via bugs abuse and now the becomes who to pay,  is it the casino due to inability to tackle bugs,  or the player who abuse such bugs.

[Kemarit]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

It depends, as far as I can remember, Stake has bugs@stake.com.

So you didn't mentioned what casino you have found the bug if you already found one though. So in any case you have to check with them first, maybe through their support or if they have official email or even to their official social media account.

This is also a good question as no one has compiled as far as I know, how someone can report and go with a bug bounty.

[vennali]

Customers would absolutely exploit it for profit if not already. I don't believe it's a bug that has been reported before because it would result in major loss. I have reported it to support and my host did say that I would "probably" be compensated depending the bug. I just hope that doing the right thing was the right move and they see the severity. Fingers crossed

In that case, do report it and hopefully they reward you handsomely for it. I had reported a bug myself, long long time ago. Which users were exploiting, they did fix it after a couple of days since my report, but I wasn't given any compensation for it. All that was said was "Thanks for the report, we are working on a fix". Oh well, it be like that sometimes but at least I did the right thing.

[Asuspawer09]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

I think there are some casinos or online gambling websites that are offering bug bounty here in the forum, but you can't really pick a gambling website to do the review, you could just wait here in the forum since there are some postings on the services section sometimes, but you couldn't really wait for it since it wasn't guaranteed that there will be bug bounty again that is going to be offered there.

In my experience reporting a bug in a gambling website wasn't going to be profitable or you can't really expect to be paid for it since it was just considered feedback I've done it on some gambling websites reporting some problems and bugs, and they are going to try to solve that issue especially if it has an effect on the website other than that you cant expect some kind of reward finding it, unless they are already offering to pay users that is going to find bugs on their websites, I mean if you're going to find bugs do it on the website that is already offering payments for it.

[tbterryboy]

Thanks for the reply all. I did contact support and let them know of a possible issue but before I went farther I wanted to make sure because I didn't really get a commitment to a bounty pay. I'm not the most tech savvy but so if I can get it to happen someone who knows what their doing can be rich. Maybe

A platform, whether it's a casino or anything else, would have a dedicated page with all the details and information about a bug bounty if they have one. If the casino has no such thing available on their website nor you have heard anything like that from them in either their promotions or announcements threads around the internet, I'm not sure if they are going to give you anything for it because they only do it if they have a bug bounty available.

However, you should wait for a response from their support team and see if they are willing to give you a bounty for it. You should be cheeky with it, and tell them that you will only tell them about the bug if they promise they will reward you for it, and if they agree, you should go ahead .

[kotajikikox]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

The casino is not in whatever obliged to pay as long as they are not asking you to do it but the problem is that Bug reporting will
help them improves their service and keep safe their site but yes you must ask them first or else forget about the reporting
because you will only be hurting if they did not pay you as you seems to be seeking for bounty in your reports.

[bitterguy28]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

So what have you decided? have you already report the bugs or at least ask the team or the support to what will be the prizes of your bug finding?

in some event here in forum , there are some gambling sites that conduct bug finding campaign like Fortune hack before their re opening of campaign here , so how about this site that you are pointing , is there any plans from them to have their bug finding as well?

[Belarge]

The casino is not in whatever obliged to pay as long as they are not asking you to do it but the problem is that Bug reporting will
help them improves their service and keep safe their site but yes you must ask them first or else forget about the reporting
because you will only be hurting if they did not pay you as you seems to be seeking for bounty in your reports.

None of these casinos is perfect, everyone would wished for significant chances that would enlighten their minds on the positive results. If you file a complaint to the team behind the casino or better report the customer's care, everything will be figured out do easily and without the disturbance of other interference base. We wanted what's best for us and we will do whatever it takes to be running smooth tasks within the range of the casino, none of us would wished for a faulty desk because profits is the path we have chosen to follow.

[rodskee]

The casino is not in whatever obliged to pay as long as they are not asking you to do it but the problem is that Bug reporting will
help them improves their service and keep safe their site but yes you must ask them first or else forget about the reporting
because you will only be hurting if they did not pay you as you seems to be seeking for bounty in your reports.

None of these casinos is perfect, everyone would wished for significant chances that would enlighten their minds on the positive results. If you file a complaint to the team behind the casino or better report the customer's care, everything will be figured out do easily and without the disturbance of other interference base. We wanted what's best for us and we will do whatever it takes to be running smooth tasks within the range of the casino, none of us would wished for a faulty desk because profits is the path we have chosen to follow.

But what had OP is asking here is that about the Bug He finds out and that is not about the complaint
and them being perfect because it is natural to have issues and bugs but having action towards cleaning it is really
a big help and people like OP must be rewarded though it is not requirements to pay them but for casinos generosity ?
then they must pay Op or else he will deny sending it to them.

[Sling0]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

So what have you decided? have you already report the bugs or at least ask the team or the support to what will be the prizes of your bug finding?

in some event here in forum , there are some gambling sites that conduct bug finding campaign like Fortune hack before their re opening of campaign here , so how about this site that you are pointing , is there any plans from them to have their bug finding as well?

Yes I have reported it to the casino and also I'm assuming recreated it for them I'm assuming on a test server. I forwarded the error codes from my end that I was seeing while causing the error. I believe they are fixing it but I'm not sure. Not trying to cause issues so I haven't tried to recreate the problem until they update me on my support conversation. Still waiting for them to update me and also receive a thank you$? 🙄

[robelneo]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Completely depends on what can be exploited from that said bug. Can a customer/player win more than he normally would(exploiting). In that case, the casino would pay bounty. If its a bug that lets casino earn more? I guess they'll just refund you the money wagered(individually) and maybe fix it.

Customers would absolutely exploit it for profit if not already. I don't believe it's a bug that has been reported before because it would result in major loss. I have reported it to support and my host did say that I would "probably" be compensated depending the bug. I just hope that doing the right thing was the right move and they see the severity. Fingers crossed

Well, I hope you get compensated because you deserve it, If it is not patched it will result in a major loss to the platform, they are ungrateful if they will not compensate you, there was a bug-related thread, unfortunately, the casino did not pay the bug hunters and even accuse him of exploiting the bug, I hope this will not happen here, as long as you did not exploit the bug and your conscience is clear you deserve to get compensated, and after they compensate you get back on us
and tell us the name of the casino if you have permission from the casino to post their name.

[shivansps]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Most likely you need to contact technical support. If money was lost due to an error, then you need to look into it and the money will be returned. This is how I understand it’s actually difficult to say. I think that situations are different and you need to contact technical support

[alani123]

If you find a serious bug that could be exploited for private data or unauthorized access to money that's not yours, the only way to deal with such matter is to disclose it privately and wait until it's patched to talk about the incident.

If the casino establishment is of any merit, they should also provide a monetary reward for disclosing bugs responsibly.
If they actually patch a bug without acknowledgment, it's in everyone's interest to talk about this with the community so users can know that this casino does not appreciate responsible disclosure procedures.
Responsible disclosure is actually a vital part of making online platforms secure and keeping them this way. I just wish more casinos had such programs that they would honor in case any vulnerability in their platform gets discovered.

We've seen so many data breaches lately that it makes sense to keep things as secure as possible for something that involves money combined with irreversible transactions, crypto...

[Fivestar4everMVP]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Don't take my advice serious if you are soft hearted, but if you are hard hearted and do not want to be cheated, then maybe you can take this advice.

First, you have to check if the casino has a bug bounty program and are willing to pay hunters who discover and report critical buds.
Secondly, is the casino a big casino or a small one, this is important because, a big casino that is already established and earned a good reputation may like keep to their promise of paying you for your bug discovery.
But small casinos may want to cheat you for reasons I think Is obvious.

So, if you are dealing wit a small casino, I would say that, if the bug allows you to steal some funds from the casino by exploiting it, then exploit the bug and steal from the casino, but immediately reach out to the casino and promise to return every penny you stole back to them once you get your bug bounty payment, if they pay, return the money stolen back to them, but if they don't, then maybe you keep what you stole as your payment for reporting the bug.

But if the bug does not allow you steal funds or user information from the casino, then just report the bug to them and don't expect to be paid, for casinos will naturally not consider such bugs critical enough to worth paying for.

This I believe is the only way to avoid being cheated by a small casino that possibly wil not want to keep to their promise of paying users for bug discovery.

[Dunamisx]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

[mak013]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Every casino has support. You can write them about it. I don`t think that they`ll react fast, so it would be nice to make several screenshots and give them e-mail address to contact.
And i can`t say anything about bounty. Some casinos have such program, and the other casino can just fix the bug without payout.

[NeilLostBitCoin]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Before reporting a bug in a casino, it's important to check whether they have a bug bounty program in place. If they don't, it's unlikely that they will reward you for finding a bug and they may even ignore who reports it so it's up to you if you still want to report that bug. You can ask them beforehand if they offer any credits for reporting bugs. If they do, then you should cooperate with them and assist them in fixing the bug. Once the bug is fixed, you can expect to receive your reward if there is one.

[acroman08]

Yes I have reported it to the casino and also I'm assuming recreated it for them I'm assuming on a test server. I forwarded the error codes from my end that I was seeing while causing the error. I believe they are fixing it but I'm not sure. Not trying to cause issues so I haven't tried to recreate the problem until they update me on my support conversation. Still waiting for them to update me and also receive a thank you$? 🙄

give it some time, they might still be checking and fixing the issue you found. perhaps once they are done with what they are doing they'll say their thanks and hopefully give you compensation for what you did.

Not trying to cause issues so I haven't tried to recreate the problem until they update me on my support conversation.

yeah, better not to do that, you might get accused of exploiting the bug.

[uneng]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

So what have you decided? have you already report the bugs or at least ask the team or the support to what will be the prizes of your bug finding?

in some event here in forum , there are some gambling sites that conduct bug finding campaign like Fortune hack before their re opening of campaign here , so how about this site that you are pointing , is there any plans from them to have their bug finding as well?

Yes I have reported it to the casino and also I'm assuming recreated it for them I'm assuming on a test server. I forwarded the error codes from my end that I was seeing while causing the error. I believe they are fixing it but I'm not sure. Not trying to cause issues so I haven't tried to recreate the problem until they update me on my support conversation. Still waiting for them to update me and also receive a thank you$? 🙄

Let's hope you get paid for your effort, skills and honesty in reporting the bug to the platform. In every cases, you should return here after all to share a conclusion about your story, telling the community more details about this specific casino, the bug itself and how they handled the support to you. It also adds to the casino's reputation. If they were generous with you, I'm sure other gamblers will feel encouraged reporting bugs as well, when spotted on their platform. However, if they were egoistical and stingy, it's unlikely someone will help them futurely in similar situations. Keep the thread updated!

[Lanatsa]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

So what have you decided? have you already report the bugs or at least ask the team or the support to what will be the prizes of your bug finding?

in some event here in forum , there are some gambling sites that conduct bug finding campaign like Fortune hack before their re opening of campaign here , so how about this site that you are pointing , is there any plans from them to have their bug finding as well?

Yes I have reported it to the casino and also I'm assuming recreated it for them I'm assuming on a test server. I forwarded the error codes from my end that I was seeing while causing the error. I believe they are fixing it but I'm not sure. Not trying to cause issues so I haven't tried to recreate the problem until they update me on my support conversation. Still waiting for them to update me and also receive a thank you$? 🙄

Let's hope you get paid for your effort, skills and honesty in reporting the bug to the platform. In every cases, you should return here after all to share a conclusion about your story, telling the community more details about this specific casino, the bug itself and how they handled the support to you. It also adds to the casino's reputation. If they were generous with you, I'm sure other gamblers will feel encouraged reporting bugs as well, when spotted on their platform. However, if they were egoistical and stingy, it's unlikely someone will help them futurely in similar situations. Keep the thread updated!

Sometimes this kind of situation couldnt really give out that kind of assurance that you would really be getting some  sort of reward basing up on the bug that you had found. If this something that it is really
that relevant or serious thing then you might really be considered on having those kind of reward but of course it would really be just that still depending on the casino or company whether they would really be that generous enough and giving out that kind of reward basing up on what you have found or discovered. You are lucky if they had able to recognize such find but if not then you wont really be getting something.

This is why on the time that you do see up some bugs, if they do have currently some bug bounty then you are lucky but if there's none then dont let your hopes up
because you cant really be paid or rewarded on the thing that you have founded. It is really something to be that situational because not all would really
that too generous or having that consideration when someone do find out some flaws into the platforms.

[livingfree]

Yes I have reported it to the casino and also I'm assuming recreated it for them I'm assuming on a test server. I forwarded the error codes from my end that I was seeing while causing the error. I believe they are fixing it but I'm not sure. Not trying to cause issues so I haven't tried to recreate the problem until they update me on my support conversation. Still waiting for them to update me and also receive a thank you$? 🙄

Until now you haven't received any reply and feedback from them? We're like everyone is back to work and New Year's Eve is done.

If they are still on the analysis of the error codes and the bug that you've found. I guess a token of appreciation to be given is gonna make your heart happy with that.

And of course, with the thank you message that you've helped them figure out something that probably isn't seen by the other users.

[PX-Z]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

If they have bug bounty, then properly report it, and you will be paid by how depth it is and by their bounty program rewards system.
But if they don't have such, i don't think they would care. You might get just a "thank you" without getting paid or getting a reward.

Now if your intention is just to help, you're okay to not getting paid when you report such bug, it's okay, but of if not, i don't mind reporting them as well.

[rodskee]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

[Reatim]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

I think it has been completely answered above that you have not to expect any payment at all unless the site is generous enough to pay you , they did not ask you to find bug , actually this has happened before and the account that reported the bug did not received any amount so he needs to create a thread here but to reality , he received criticism for expecting payment when he wasn't even tasked to do that bug finding , and if you have found this accidentally then just let it out , or not act anything and just pretend this isn't happened .

[pawanjain]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Not all the sites pay bounty for a bug reported. Some sites don't pay at all and just say thank you.
Some sites pay a bounty out of their choice and the other sites have a bug bounty program itself.
You have to go through their bug bounty program page for knowing the rewards for the bug types.
Also, you should know how to report a bug because there is a format to do so.

[fapar]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

[BenCodie]

If it is a user interface bug, expect no more than a pat in the back. If it is a non-exploitable/non-vital platform bug, don't expect a reward but it should be more likely to get one as it may help patch a hole in leaking/lost business as a result of the bug. If it is an exploitable bug, it should definitely be rewarded.

That's my 2 cents generally...however...

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).

BC Game. I messaged them on here yesterday but no response

...I wouldn't count it from this casino. They've been known to hold balanced and freeze funds for extended periods of time, until they suddenly had someone come and solve all problems months later. If you didn't message that account handling their "PR 2.0" (so to speak) then you can do so here:
https://bitcointalk.org/index.php?action=profile;u=3592321 - This profile is the support account. The OP of their thread is (apparently) for some other purpose.

[abel1337]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

[paxmao]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

[dezoel]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Before reporting a bug in a casino, it's important to check whether they have a bug bounty program in place. If they don't, it's unlikely that they will reward you for finding a bug and they may even ignore who reports it so it's up to you if you still want to report that bug. You can ask them beforehand if they offer any credits for reporting bugs. If they do, then you should cooperate with them and assist them in fixing the bug. Once the bug is fixed, you can expect to receive your reward if there is one.

In our forum, there are several reports about a user claiming that they haven't paid for the bugs that they find despite of the site having a bug bounty. If they don't like the report, they can always reply and explain, not that they ignore the message or they just "seen" it.

We don't know though, maybe they are only talking advantage of it for free. Then there is that platforms who don't put a bug bounty message but if we inquire them, they are glad to offer some incentives. I think they have a reason for this like they don't want the public to know that their site is buggy, as they are afraid that someone can take advantage of it personally.

[cafter]

I also had that idea of earning something by reporting bug or mistake on the site.
wasted like some hours finding some page errors, spelling mistakes, more basic stuffs but do not found anything, I was finding basic things
because i didn't have programming or hacking knowledge. also if someone is ethical hacker and found a security bug then they can report it to the casino,

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

yes, maybe you waste you entire time and find nothing in the end.

[Reatim]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

[Sling0]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

[Blowon]

On some sites you will get an award even if the bug is minor, let alone critical. but on some casino sites. like cheap casino websites or just starting out with small capital they think they won't pay you even if it's a critical bug unless you are a kind person who wants to volunteer something like that. If the bug comes from a large casino website with many communities, they will definitely pay you no matter how small the bug you get, you will be greatly appreciated. about how. I believe it is more effective to send them the email that is listed on their website.

[aioc]

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

I think you should gather all your pieces of evidence they mentioned that you would be compensated not a guarantee but at least they should give you an update and I honestly believe that you should be compensated, a bug is something that will cause big losses to any platform, if they ignore you and never give an update or compensation you should name the casino so we can question why they fail to compensate you on something that you deserves, if they promise you compensation then it deserves a thread in the scam section.

[goldkingcoiner]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should ask the casino. Depending on the severity of the bug and what you can do with it, your reward might be quite high. Also, remember: they know that if they do not pay you then you are not obliged to tell them anything. Furthermore, they know that if they do not reward bug hunters, those same people could simply sell the information to hackers and other shady characters. So it is in their best interest to reward you (but do not tell them this, because they might take it as a threat, which is illegal). Don't be afraid to haggle over the price and do not let them take you for a chump. Bugs can be very valuable. Although some bugs can be completely worthless.

[Fivestar4everMVP]

On some sites you will get an award even if the bug is minor, let alone critical. but on some casino sites. like cheap casino websites or just starting out with small capital they think they won't pay you even if it's a critical bug unless you are a kind person who wants to volunteer something like that. If the bug comes from a large casino website with many communities, they will definitely pay you no matter how small the bug you get, you will be greatly appreciated. about how. I believe it is more effective to send them the email that is listed on their website.

Well, the  actually truth of the matter is that, even some big gambling casinos are way more stingy than a start up, so, it still not every casino, whether big or small, that will be ready to pay for a bug that is minor, most won't actually, so what I think is, if the bug is minor, simply just point their eyes to it to get them notified, but don't expect any form of appreciation or reward.

But if it's a critical bug, like one that would allow hackers or even users use that bug as a means to steal from the casino real big, then some bug casinos definitely will reward a person for discovering such bug and not exploiting it, and some small casinos will also reward the person too based on their financial capacity.

But like I said before there are still some really big casinos that won't give a damn, what they did do is go behind you and fix the bug, and come back to tell you there was never a bug like that.

[fapar]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

This is actually "every medal has its reverse". That is, casinos want errors, if they exist, to be found and eliminated, and at the same time they are afraid that these errors will be used before they are published (transfered information to the casino about the existing error). In this case, of course, it is logical to hire a third-party company specializing in security, but this will incur greater costs than announcing a public bug bounty program, but at the same time it will be more reliable.

[SamReomo]

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

[Woodie]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Most casinos would pay a bug bounty if the bug is critical, you should contact the support on the site and ask for the right way to report the bug, maybe the site has an special mail for that.

Easier said than done!

If am not mistaken there was a case here on the forum were one of the users did find a bug on one of the platforms and reported it and they claimed to have already known about and never paid this guy which makes this approach kind of a win-lose scenario as they could easily choose not to pay, and use your valuable bug report without you knowing...

And remember, if you exploit the bug your account will be closed and you will not get a bounty, that's why is important to report it as fast as you find it.

Talk without action yeilds no results!

Why not do it the white hacker way, exploit this bug into a test account and make so much money and then report it  and show them to what extent this can be used and then they can take this report seriously and possibly payup the bounty prize too...this way it's a win-win, they pay up and keep funds on test account or not pay and allow you accesss to the test account with bugged fund's  

[Dunamisx]

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

It's always something good to find a bug a d report such as appropriately needed, if we are to consider the gambling sector for now, we are not having more of the people interested in this and it's all because they have experience low rate from how this is actually happening, you may hardly get to find one, gamblers will be so focused on having their fun in using the casino than looking for bugs around when majority are even after winning their bets, we can therefore see this that it's not common and that rampart as before that they were being discovered, however, we shouldn't still relent from finding more because they still exist.

[Odusko]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

[Fivestar4everMVP]

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

It's always something good to find a bug a d report such as appropriately needed, if we are to consider the gambling sector for now, we are not having more of the people interested in this and it's all because they have experience low rate from how this is actually happening, you may hardly get to find one, gamblers will be so focused on having their fun in using the casino than looking for bugs around when majority are even after winning their bets, we can therefore see this that it's not common and that rampart as before that they were being discovered, however, we shouldn't still relent from finding more because they still exist.

Well, I think you are wrong, except I don't clearly understand what you mean, which I will apologize if that be case.

Gamblers aren't the ones who go bug hunting bud, developers are mostly the ones who do, what or how will a gambler without a developer experience possibly recognize a bug in a line of codes? Practically impossible.
So, while  gamblers are busy hunting for the next big winnings, developers are busy hunting for their next pay through finding bugs on already developed products.

And you are right with what you said that bug still do exist, they do, but not like before. Understand that technology have greatly improved the way websites are built this days, alot of things are now automated and not analogly done any more, this has greatly reduced the chances of human errors in codes, which is the bug we are talking about.

[paxmao]

If it is a user interface bug, expect no more than a pat in the back. If it is a non-exploitable/non-vital platform bug, don't expect a reward but it should be more likely to get one as it may help patch a hole in leaking/lost business as a result of the bug. If it is an exploitable bug, it should definitely be rewarded.

That's my 2 cents generally...however...

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).

BC Game. I messaged them on here yesterday but no response

...I wouldn't count it from this casino. They've been known to hold balanced and freeze funds for extended periods of time, until they suddenly had someone come and solve all problems months later. If you didn't message that account handling their "PR 2.0" (so to speak) then you can do so here:
https://bitcointalk.org/index.php?action=profile;u=3592321 - This profile is the support account. The OP of their thread is (apparently) for some other purpose.

Yes that seems like a very long shot to get anything from them since it seems they are not even treating some of their customers like they are supposed to. Try anyway to send a letter about the bug, but it may only be interesting to them if it is something that can actually be exploited and cause serious problems. Service problems or user experience bugs... do not bother.

[Quidat]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

Yes, most of the time on which these platforms are completely ready on the time that they do launch, only a few will really be having that kind of bounty program into those the public
if ever they would really be running one but its not really that something common on which they would really be making announcement if ever they would really be giving some rewards
but somehow people or users could really be able to experience some possible problems on which they might be able to encounter. So the best way to do is to report it to
support and tell them but never expect about bounty or reward not unless if it is really that a serious bug that had been found.

[chaser15]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Usually, when someone finds a bug, the casino will give a token of gratitude regardless if the site offers a bounty for reporting a bug.

Also depends on what kind of bug you discover e.g. technical bug, glitch, unresponsive script, unpaid legit lines, etc.

To report it, obviously, you have to reach the site thru their available channels, not unless there's a specific instruction posted on the site about how to report bugs. Do you find a bug? If that can be a caused of chances of being abuse, I hope you reach the site immediately.

[Sling0]

UPDATE.

So to date no reply from any staff at BC Game on the reported bug and support has no information on my reporting it or the help on showing them the bug on their test server. So if a bounty isn't listed on the site I would recommend not reporting it if you would expect a  thank you. NOW FOR THE BUG:
I don't ever play crash because I always lose and imo it's a high roller game but for the hell of it played anyway. Some how and still don't know how I was able to get crash to attach to me device allowing me to crash the game whenever I hit the cashout button. This also allowed me to send the game to the moon believe it or not. (I have screen recording so please not interested in arguing). At 1st I thought it was a fluke and the game was crashing at the very same time I would hit the button and it wasn't a fluke. The errors would come across my screen script fail, etc, etc won't list them all. Had I been a hacker or less of a human being I would have exploited this for major profit but instead I immediately reported it. The next question I would have now is how provable fair are these games if I was able to control the outcome from my device? Thoughts?

[Dunamisx]

Wait a little bit OP, are you doing this just to get your reward or you're being passionate about seeing a bug being reported, another thing I would have suggested is for you to go through their own announcement thread to make such report there or directly to their representative, this is one of the advantage of having their announcement thread here for discussion on their service, let's see maybe you could get some attention either, but I will employ that you remain less desperate about receiving a reward on it.

[Odusko]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

Subsequently, on that basis, it is good to note that bugs have varieties and what they hold on the site, if it has to do with a less technical aspect,  the site may decide not to pay anything for them since it believes at that stage the it based on features that do not have direct implications and application on games that are listed on the casino.
Aside from that, other bugs have to do with the game system which if left intended could lead to a high degree of impact on the game realities and results,  this level of bug is treated with high attention and casinos will easily pay bounty or compensation for those who will report them.

[Sling0]

Wait a little bit OP, are you doing this just to get your reward or you're being passionate about seeing a bug being reported, another thing I would have suggested is for you to go through their own announcement thread to make such report there or directly to their representative, this is one of the advantage of having their announcement thread here for discussion on their service, let's see maybe you could get some attention either, but I will employ that you remain less desperate about receiving a reward on it.

Just an update on the whole thing. Never requested or demanded a bounty but I did expect a reply which never happened. So just updating my original post so nobody needs to guess anymore on it. But truly I do wonder the provable fair aspect of any of the crash games because of the script being controlled by a basic users device. Whats the odds of crash crashing three times in a row at 0.00? What are the odds of it crashing at the very same time a user hits "cashout" ten times in a row? How many times have you logged the game showing 0 of 2200 people when crash reaches 100? I'm not blasting BC Game at all even though I am disappointed that a simple thanks never happened after they fixed the problem.

[sujonali1819]

Some how and still don't know how I was able to get crash to attach to me device allowing me to crash the game whenever I hit the cashout button. This also allowed me to send the game to the moon believe it or not.

This is insane and a very critical bug for sure. You deserve a reward from the platform end if it's legit. But yes if the casino does not have a bug bounty listed somewhere in the platform or an announcement from the official channel, you can not force them to pay. (I am not saying you are forcing)

But yeah since you came up with this topic here in the forum and you know it's Bcgame, It will be better if you keep discussing this on their ANN thread.

[Bushdark]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should be ready to write to the team about something you have to tell them. First of all, you don't have to disclose the bug to the team immediately but just have to inform them that you have something that could lead to them losing big money as a result of the bug.
They will be the one to ask you if what the big could be explaining in details. They might want to add bounty for you if your claim is genuine and could pose a big threat to them.

[tbterryboy]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

Generally, it's not only before the launch, but some platforms would have a bug bounty for a pretty long time when they start their platform so that users that find the bugs report it to them to get the reward instead of trying to exploit the bugs and steal from the casino. I believe some people might try to do that instead of reporting the bugs because a lot of people think it's easy to use a bug or something in a platform and then steal from the system.

If a platform, whether it's a casino, a new cryptocurrency project, or anything in general, doesn't have a specific bug bounty, you will barely get anything from them if you report a bug because they will say that unfortunately they don't have a bug bounty right now and they might compensate you later for it but you won't get anything later.

[sunsilk]

UPDATE.

So to date no reply from any staff at BC Game on the reported bug and support has no information on my reporting it or the help on showing them the bug on their test server. So if a bounty isn't listed on the site I would recommend not reporting it if you would expect a  thank you. NOW FOR THE BUG:
I don't ever play crash because I always lose and imo it's a high roller game but for the hell of it played anyway. Some how and still don't know how I was able to get crash to attach to me device allowing me to crash the game whenever I hit the cashout button. This also allowed me to send the game to the moon believe it or not. (I have screen recording so please not interested in arguing). At 1st I thought it was a fluke and the game was crashing at the very same time I would hit the button and it wasn't a fluke. The errors would come across my screen script fail, etc, etc won't list them all. Had I been a hacker or less of a human being I would have exploited this for major profit but instead I immediately reported it. The next question I would have now is how provable fair are these games if I was able to control the outcome from my device? Thoughts?

That's actually sad if they don't ever give you a reply with what you've reported. Maybe they're still analyzing it and verifying your report but I understand you to have at least that reply to you on what's their take on this.

IMO, it's a serious bug that someone can exploit if ever it is for real. But then, I think that they'll be able to detect it as well if ever someone abuses it and can see that back logs from those accounts that will exploit.

Try posting it on their official thread, maybe you'll get some attention there and they'll be able to reply to you from there.

[fapar]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

In my opinion, it is impossible to identify 100% of mistakes/bugs in the operation of such a complex site as an online casino. On the testnet, of course, you can simulate certain situations that are close to real ones. But the tester primarily bases his work on previously gained experience (he knows what to look for first, what situations to simulate), but a large number of ordinary casino users can unintentionally create a situation that will lead to a new unidentified mistake. Therefore, bug-bounty campaigns are necessary and important after the launch of an online casino.

[Oilacris]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

In my opinion, it is impossible to identify 100% of mistakes/bugs in the operation of such a complex site as an online casino. On the testnet, of course, you can simulate certain situations that are close to real ones. But the tester primarily bases his work on previously gained experience (he knows what to look for first, what situations to simulate), but a large number of ordinary casino users can unintentionally create a situation that will lead to a new unidentified mistake. Therefore, bug-bounty campaigns are necessary and important after the launch of an online casino.

If you are some sort of a programmer or having that coding experience and bug expert for you to find out those exploits and holes then it would be that easy but there were people who do able to find out bugs naturally specially to those who are really that making some gambling on the site itself on which they would really be expecting for some bug bounty or rewards on which it would really be that depending on a certain site whether they would really be considering those finds or wouldnt really be giving at all. It would really just vary on a certain individual on which
not all people would really expecting somehow into those finds not unless if its really that a crucial find or exploit or bug then they might be expecting something.

[rat03gopoh]

NOW FOR THE BUG:

Asked @icopress (as their current marketing manager) for help, I think he has connections to important BCgame people. But you hope it's a bug, why would you let someone else try to exploit it? It seems like the chances of you getting a bounty from this discovery are getting smaller.

[Hirose UK]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should be ready to write to the team about something you have to tell them. First of all, you don't have to disclose the bug to the team immediately but just have to inform them that you have something that could lead to them losing big money as a result of the bug.
They will be the one to ask you if what the big could be explaining in details. They might want to add bounty for you if your claim is genuine and could pose a big threat to them.

Gambling sites are used by many gamblers and of course when problems such as bugs occur, not only one or two people know about them, so if you just want to get reward for reporting bug, it not an easy thing.
Unless we are the first users to know about the bug problem, maybe there will be little appreciation given by them, such as some bonuses that we can get, but I sure there will be other gamblers who know better from the start and report it to the team.

But some people take advantage of bugs to win more easily, it shame that this happens because when the team finds out about it, there will be difficulties that the gamblers have to face.

Being good gambler is wise attitude that we rarely find, the average gambler doesn't want to do something like that because they prefer to use it for personal gain.

[Reatim]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

Oh , sorry to hear that mate , I thought that you have posted this thread without action first about the bug or reporting it , I thought that you are first waiting for their reply if you need to continue the report or keep it yourself , anyway just have it thinking that you did a good deeds for others though it is a big gambling site that truly earns a lot and throwing a small gesture will not hurt them in anyway, but like what you said its all been said and done so its up to the team if by any chance they will get back to you and even just to say "THANK YOU" .
you are a good man in this situation mate and you have also did a good job so Heads Up , be that all your life   and your kids will be proud of you.

[bitterguy28]

Wait a little bit OP, are you doing this just to get your reward or you're being passionate about seeing a bug being reported, another thing I would have suggested is for you to go through their own announcement thread to make such report there or directly to their representative, this is one of the advantage of having their announcement thread here for discussion on their service, let's see maybe you could get some attention either, but I will employ that you remain less desperate about receiving a reward on it.

Just an update on the whole thing. Never requested or demanded a bounty but I did expect a reply which never happened. So just updating my original post so nobody needs to guess anymore on it. But truly I do wonder the provable fair aspect of any of the crash games because of the script being controlled by a basic users device. Whats the odds of crash crashing three times in a row at 0.00? What are the odds of it crashing at the very same time a user hits "cashout" ten times in a row? How many times have you logged the game showing 0 of 2200 people when crash reaches 100? I'm not blasting BC Game at all even though I am disappointed that a simple thanks never happened after they fixed the problem.

It is normal that you feel that way  because you have given them service thought hey did not asks , and that service will save their business for abusing in the future and for sure it will save them some good amount for fixing that bug so yeah you should at least be given even a simple dedications.

maybe the team is facing so much difficulties nowadays that is why they did not pay attention to your case here but maybe sooner it will be answered and at least be rewarded?

[mak013]

UPDATE.

So to date no reply from any staff at BC Game on the reported bug and support has no information on my reporting it or the help on showing them the bug on their test server. So if a bounty isn't listed on the site I would recommend not reporting it if you would expect a  thank you. NOW FOR THE BUG:
I don't ever play crash because I always lose and imo it's a high roller game but for the hell of it played anyway. Some how and still don't know how I was able to get crash to attach to me device allowing me to crash the game whenever I hit the cashout button. This also allowed me to send the game to the moon believe it or not. (I have screen recording so please not interested in arguing). At 1st I thought it was a fluke and the game was crashing at the very same time I would hit the button and it wasn't a fluke. The errors would come across my screen script fail, etc, etc won't list them all. Had I been a hacker or less of a human being I would have exploited this for major profit but instead I immediately reported it. The next question I would have now is how provable fair are these games if I was able to control the outcome from my device? Thoughts?

Only one thing i can say about this situation. Of course, they can fix the bug without any bounty rewards. Even if they have bounty program and you have no proves. But i don`t think, that $100-$500 is a big sum for the casino. It would be nice to pay for bug and make some post about it. So, the next time it would be better to fix everything with screenshots. I don`t think that it will help to get some bonus for bug, but it will show that there is no gratitude for help.

[Mahanton]

UPDATE.

So to date no reply from any staff at BC Game on the reported bug and support has no information on my reporting it or the help on showing them the bug on their test server. So if a bounty isn't listed on the site I would recommend not reporting it if you would expect a  thank you. NOW FOR THE BUG:
I don't ever play crash because I always lose and imo it's a high roller game but for the hell of it played anyway. Some how and still don't know how I was able to get crash to attach to me device allowing me to crash the game whenever I hit the cashout button. This also allowed me to send the game to the moon believe it or not. (I have screen recording so please not interested in arguing). At 1st I thought it was a fluke and the game was crashing at the very same time I would hit the button and it wasn't a fluke. The errors would come across my screen script fail, etc, etc won't list them all. Had I been a hacker or less of a human being I would have exploited this for major profit but instead I immediately reported it. The next question I would have now is how provable fair are these games if I was able to control the outcome from my device? Thoughts?

Only one thing i can say about this situation. Of course, they can fix the bug without any bounty rewards. Even if they have bounty program and you have no proves. But i don`t think, that $100-$500 is a big sum for the casino. It would be nice to pay for bug and make some post about it. So, the next time it would be better to fix everything with screenshots. I don`t think that it will help to get some bonus for bug, but it will show that there is no gratitude for help.

Really depends on a certain company whether they would really be giving out that kind of amount as shown for appreciation on finding a bug, i do agree on what others been saying that there's no such thing about perfect security or perfect coded website on which there would really be errors that could possibly exist but its true that before they would really be making that main launch then everything is already set and pretty sure that
they had already polished it out when it comes to those bugs and fixes. Now on what op had been able to find out then it is really that indeed neither a serious or a small issue on which they wont really be
tending to give out any rewards not unless if its a major one but its true that they can fix it out silently without telling or giving out some response on the said report.

On which they would really be just simply ignore or deny that it wasnt an issue. For those gamblers who do really be able to report those bugs and exploits and expecting something for some reward
then it would be better that you shouldn't because not everytime they would really be giving out that kind of reward or bounty on the thing that you have found out.
Luck you if they would be reconsidering those things you had reported but we know that not all would really be having that consideration and just simply ignore you.

[mak013]

Only one thing i can say about this situation. Of course, they can fix the bug without any bounty rewards. Even if they have bounty program and you have no proves. But i don`t think, that $100-$500 is a big sum for the casino. It would be nice to pay for bug and make some post about it. So, the next time it would be better to fix everything with screenshots. I don`t think that it will help to get some bonus for bug, but it will show that there is no gratitude for help.

Really depends on a certain company whether they would really be giving out that kind of amount as shown for appreciation on finding a bug, i do agree on what others been saying that there's no such thing about perfect security or perfect coded website on which there would really be errors that could possibly exist but its true that before they would really be making that main launch then everything is already set and pretty sure that
they had already polished it out when it comes to those bugs and fixes. Now on what op had been able to find out then it is really that indeed neither a serious or a small issue on which they wont really be
tending to give out any rewards not unless if its a major one but its true that they can fix it out silently without telling or giving out some response on the said report.

On which they would really be just simply ignore or deny that it wasnt an issue. For those gamblers who do really be able to report those bugs and exploits and expecting something for some reward
then it would be better that you shouldn't because not everytime they would really be giving out that kind of reward or bounty on the thing that you have found out.
Luck you if they would be reconsidering those things you had reported but we know that not all would really be having that consideration and just simply ignore you.

I understand all that you say. And we can`t do anything with it. The only thing we can do(if we decide to show the bug) is to make several screenshots that can prove that this bug was fixed after our information. If we post it several times - nobody will tell the casino about bugs. Or we can use this bugs. Everybody can choose his own way but the only thing i`m sure in - the casino hurts himself with such ignoring bug hunters.

[Dunamisx]

Wait a little bit OP, are you doing this just to get your reward or you're being passionate about seeing a bug being reported, another thing I would have suggested is for you to go through their own announcement thread to make such report there or directly to their representative, this is one of the advantage of having their announcement thread here for discussion on their service, let's see maybe you could get some attention either, but I will employ that you remain less desperate about receiving a reward on it.

Just an update on the whole thing. Never requested or demanded a bounty but I did expect a reply which never happened. So just updating my original post so nobody needs to guess anymore on it. But truly I do wonder the provable fair aspect of any of the crash games because of the script being controlled by a basic users device. Whats the odds of crash crashing three times in a row at 0.00? What are the odds of it crashing at the very same time a user hits "cashout" ten times in a row? How many times have you logged the game showing 0 of 2200 people when crash reaches 100? I'm not blasting BC Game at all even though I am disappointed that a simple thanks never happened after they fixed the problem.

Happy us all, the problem has been finally fixed, that's the most exciting news about the whole thing, am also happy that you're able to arrived at something to conclude on, it's something to also write about because you're been attended to and they made a response to you as requested, there's no how you can make use of a gambling platform and never have anything to experience about the, be it bad or good, everything is being sum up to how we feel the fun in gambling.

[Odusko]

UPDATE.

So to date no reply from any staff at BC Game on the reported bug and support has no information on my reporting it or the help on showing them the bug on their test server. So if a bounty isn't listed on the site I would recommend not reporting it if you would expect a  thank you. NOW FOR THE BUG:
I don't ever play crash because I always lose and imo it's a high roller game but for the hell of it played anyway. Some how and still don't know how I was able to get crash to attach to me device allowing me to crash the game whenever I hit the cashout button. This also allowed me to send the game to the moon believe it or not. (I have screen recording so please not interested in arguing). At 1st I thought it was a fluke and the game was crashing at the very same time I would hit the button and it wasn't a fluke. The errors would come across my screen script fail, etc, etc won't list them all. Had I been a hacker or less of a human being I would have exploited this for major profit but instead I immediately reported it. The next question I would have now is how provable fair are these games if I was able to control the outcome from my device? Thoughts?

In summary to that, that thought only exist in your head, since the BC game team have seen that your reports for nnthe bug is not worthy of any attentions and how best you are truthful to yourself, and if their act as if nothing is wrong with the system and there is no bug which their have not stated any ways, but be sure that the only way we can believe you is when you share some screenshots since you said you have some of them at your disposal.
Any ways, I think the best way is to try more to get in the touch with the support and hear their own side of the story, but also note that when a player fine a bug in he system, it is noble enough for them to report the said bug the the team instead of exploting them

[khaled0111]

I'm not going to comment on the bug itself  as no PoC has been provided (I don't think it's ethical to post it publicly without the casino's consent, anyways).
However, I wanted to salute you for your honesty and reporting the bug instead of exploiting it and milking the casino's wallets dry!
I also wanted to share my opinion on your second question:

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You can't hold them accountable especially if they don't have a bug bounty program. Even those who have it but don't want to pay you can claim it's a duplicate and reject your report.

[AmoreJaz]

I'm not going to comment on the bug itself  as no PoC has been provided (I don't think it's ethical to post it publicly without the casino's consent, anyways).
However, I wanted to salute you for your honesty and reporting the bug instead of exploiting it and milking the casino's wallets dry!
I also wanted to share my opinion on your second question:

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You can't hold them accountable especially if they don't have a bug bounty program. Even those who have it but don't want to pay you can claim it's a duplicate and reject your report.

that is true, check the section of the terms regarding bug-related protocols for the site. because if they have, they have certain requirements to comply with. because not all sites have their rules on this bounty. however, for ethical purposes, one can always contact their support and ask for assistance about such concern. it is your conscience that will direct you if you will tell them about your discovered bug or just siphon their vaults for your own pocket.

In summary to that, that thought only exist in your head, since the BC game team have seen that your reports for nnthe bug is not worthy of any attentions and how best you are truthful to yourself, and if their act as if nothing is wrong with the system and there is no bug which their have not stated any ways, but be sure that the only way we can believe you is when you share some screenshots since you said you have some of them at your disposal.
Any ways, I think the best way is to try more to get in the touch with the support and hear their own side of the story, but also note that when a player fine a bug in he system, it is noble enough for them to report the said bug the the team instead of exploting them

i believe it is his own disposal if he is true to intentions in helping the site about the bug or not. because let's say the site is not giving some incentives, are you going to submit your discovered bug or are you gonna exploit it? now, that is for you to contemplate about. because if you reach them and not reaching back, and you feel your time is being wasted, then, it is for you to decide what to do with the bug you discovered.

[Wiwo]

Wait a little bit OP, are you doing this just to get your reward or you're being passionate about seeing a bug being reported, another thing I would have suggested is for you to go through their own announcement thread to make such a report there or directly to their representative, this is one of the advantage of having their announcement thread here for a discussion on their service, let's see maybe you could get some attention either, but I will employ that you remain less desperate about receiving a reward on it.

From the look of things,  the ops are up to a system that is not clearly open to the general public,  because to some extent it looks like ops have nothing to show for it and since the casino team themselves have paid no attention to the claim,  that leads us to more curiosity as of what we can't expect from the ops claims,  and judging from ops recent communication also I have lost trust in him and at some point,  I feel he is just trying to create a fud around.

So that we can't take him seriously on his claims of possible bugs in the BC games system and if he has anything he can come up with evidence as proof of his claim and then the whole community will clap for him for his noble act.

[TimeTeller]

I'm not going to comment on the bug itself  as no PoC has been provided (I don't think it's ethical to post it publicly without the casino's consent, anyways).
However, I wanted to salute you for your honesty and reporting the bug instead of exploiting it and milking the casino's wallets dry!
I also wanted to share my opinion on your second question:

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You can't hold them accountable especially if they don't have a bug bounty program. Even those who have it but don't want to pay you can claim it's a duplicate and reject your report.

That is the problem if the site doesn't have bug bounty program. You can't force them to pay or give you some reward for your work.
But if you want clear conscience, you can report it to them without waiting for any incentive.
After all, they are not forcing you to report. It is in your morality whether you report it or exhaust this opportunity for your own gain.
Either way, it is all on you at the end of the day. The management will just according to what the owners wanted them to do.

[Porfirii]

-snip-
I also wanted to share my opinion on your second question:

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You can't hold them accountable especially if they don't have a bug bounty program. Even those who have it but don't want to pay you can claim it's a duplicate and reject your report.

That is the problem if the site doesn't have bug bounty program. You can't force them to pay or give you some reward for your work.
But if you want clear conscience, you can report it to them without waiting for any incentive.
After all, they are not forcing you to report. It is in your morality whether you report it or not.

Nowadays having a bug hunting program is highly recommended for all casinos online, because otherwise they are facing an unnecessary risk. I hope the OP is eventually rewarded because it is in the best interest of both parties. My two sats.

[fapar]

If you are some sort of a programmer or having that coding experience and bug expert for you to find out those exploits and holes then it would be that easy but there were people who do able to find out bugs naturally specially to those who are really that making some gambling on the site itself on which they would really be expecting for some bug bounty or rewards on which it would really be that depending on a certain site whether they would really be considering those finds or wouldnt really be giving at all. It would really just vary on a certain individual on which not all people would really expecting somehow into those finds not unless if its really that a crucial find or exploit or bug then they might be expecting something.

The OP has updated the information about the problem at hand. According to him, the online casino does not respond to his request, and he does not even ask for a reward. Anyone else in his place would simply continue to exploit the vulnerability in the operation of the casino: I mean, if this mistake directly affected the ability to withdraw funds that are not on the account, for example. Online casinos should conduct bug bounties on an ongoing basis and increase the level of communication with customers.

[Potato Chips]

Just an update on the whole thing. Never requested or demanded a bounty but I did expect a reply which never happened.

You sure it's a case closed already? BC is def one of the reputable casinos but I remember one of their most received criticism was that they need to up their support game so perhaps their reply may just take time. I saw you posted about sending a PM to their bitcointalk account, what about writing on their main website?

[Wiwo]

Just an update on the whole thing. Never requested or demanded a bounty but I did expect a reply which never happened.

Are you sure it's a case closed already? BC is def one of the reputable casinos but I remember one of their most received criticism was that they need to up their support game so perhaps their reply may just take time. I saw you posted about sending a PM to their bitcointalk account, what about writing on their main website?

Really,  is the support that inactive?

Because at some point there is a lot at stake if casino support becomes inactive or not responsive to tickets and issues that are as serious as this being left unattended is a significant bad role of the support.

And if this bug report by ops is actually true and the support behaviour as this is also true it then means that BC games will be under a lot of losses without the knowledge.

[SamReomo]

It's always something good to find a bug a d report such as appropriately needed, if we are to consider the gambling sector for now, we are not having more of the people interested in this and it's all because they have experience low rate from how this is actually happening, you may hardly get to find one, gamblers will be so focused on having their fun in using the casino than looking for bugs around when majority are even after winning their bets, we can therefore see this that it's not common and that rampart as before that they were being discovered, however, we shouldn't still relent from finding more because they still exist.

Mostly players don't have much knowledge regarding those bugs and they aren't bug bounty experts either but sometimes a player with sharp mind can find some easy bugs that aren't related to code but can be accessed via the UI of a website. It requires specialized knowledge of hacking and programming to find the bugs in a casino or a game that a casino offers and I'm really sure that most of the players don't even care about such bugs because they mainly play to test their luck and if their luck is good then they can easily win against the casino's house edge.

Let's assume if a player is expert at finding bugs then surely that player will spend more time to find those bugs rather than playing the game. I have noticed that very few players are interested in finding bugs in casinos and I have never seen casino sites to offer good rewards to those players or those people who can find bugs. But, it's a sure thing that if someone tries to help a casino by finding some bugs of their platform then they will at least get some rewards for doing that.

[Potato Chips]

Really,  is the support that inactive?

Because at some point there is a lot at stake if casino support becomes inactive or not responsive to tickets and issues that are as serious as this being left unattended is a significant bad role of the support.

And if this bug report by ops is actually true and the support behaviour as this is also true it then means that BC games will be under a lot of losses without the knowledge.

To sump it up there were many scam accusation that took time to receive replies so as a sign of good faith, BC started a support account on the forum, see: https://bitcointalk.org/index.php?topic=5475418

From what I can see, there is def a significant improvement on their side but I'm not expecting it to be perfect hence it wouldn't be weird if slow replies happened in a couple of cases. There's also the fact that each cases have different complexities -- my logic to this is that simple queries will be the fastest to get a response as oppose to complex ones.

[Oilacris]

If you are some sort of a programmer or having that coding experience and bug expert for you to find out those exploits and holes then it would be that easy but there were people who do able to find out bugs naturally specially to those who are really that making some gambling on the site itself on which they would really be expecting for some bug bounty or rewards on which it would really be that depending on a certain site whether they would really be considering those finds or wouldnt really be giving at all. It would really just vary on a certain individual on which not all people would really expecting somehow into those finds not unless if its really that a crucial find or exploit or bug then they might be expecting something.

The OP has updated the information about the problem at hand. According to him, the online casino does not respond to his request, and he does not even ask for a reward. Anyone else in his place would simply continue to exploit the vulnerability in the operation of the casino: I mean, if this mistake directly affected the ability to withdraw funds that are not on the account, for example. Online casinos should conduct bug bounties on an ongoing basis and increase the level of communication with customers.

One of the best things that a certain platform or company should have is to have that kind of active support or really that fast when it comes to responding on which it do really sucks when you are really that long time waiting for some reply specially that this one talks about some bugs or exploits on which simply this is really a security concern on which it is really just that normal
that they should really be attentive if someone on their players had discovered it out, or maybe they did really do such thing intentionally just for them to avoid on giving out some
reward or bounty on such find? Just like been said it would really be just that depending on the severity of such bug whether its crucial or really just that minimal.

[TristanGG]

Most Casinos will only accept a report if it has a viable security impact with a PoC and not a general report from a scanner tool.

I'd recommend asking the casino if they have a private bug-bounty program either internally or externally (i.e, operated by BugCrowd, HackerOne, intigriti)

[Sling0]

Wait a little bit OP, are you doing this just to get your reward or you're being passionate about seeing a bug being reported, another thing I would have suggested is for you to go through their own announcement thread to make such a report there or directly to their representative, this is one of the advantage of having their announcement thread here for a discussion on their service, let's see maybe you could get some attention either, but I will employ that you remain less desperate about receiving a reward on it.

From the look of things,  the ops are up to a system that is not clearly open to the general public,  because to some extent it looks like ops have nothing to show for it and since the casino team themselves have paid no attention to the claim,  that leads us to more curiosity as of what we can't expect from the ops claims,  and judging from ops recent communication also I have lost trust in him and at some point,  I feel he is just trying to create a fud around.

So that we can't take him seriously on his claims of possible bugs in the BC games system and if he has anything he can come up with evidence as proof of his claim and then the whole community will clap for him for his noble act.

Kind of an ignorant reply in my opinion. I have created no FUD of any kind and even cleared stated I wasn't at all trashing BC Game. I have proof via screen recordings of the bug and how the bug allowed me to control the crash game. I proved to BC Game support staff via BC Game test server and can confirm as of now that the bug and how it was exploited has been fixed by BC Game because it is no longer exploitable. To be honest I've been monitoring the crash game since I reported the bug and I now see the game results showing more yellow crashes mixed in with red and green then prior weeks. Call it what you will but 2 days after I reported the bug seems crash is more stable. 🤔
I will continue to wait for BC support to reply to me if they wish and best case scenario get $ bounty or worst case a half hearted thanx. Can't post 15 minutes of screen recording anyway.

[Hirose UK]

Just an update on the whole thing. Never requested or demanded a bounty but I did expect a reply which never happened.

You sure it's a case closed already? BC is def one of the reputable casinos but I remember one of their most received criticism was that they need to up their support game so perhaps their reply may just take time. I saw you posted about sending a PM to their bitcointalk account, what about writing on their main website?

On gambling site, the customer support service will definitely work 1x24 hours or they will respond to every customer report with excellent responsiveness because customers are the most valuable group.
Talking about BC, it seems that there are several reviews which state that support needs to be improved, but from every problem that occurs it can also be seen that support certainly solves many problems and also responds to every complaint made by customers.
The casino team needs to research and investigate every problem that occurs so I don't think delay in responsiveness is too fatal, but with improvements in support they might be able to ensure customer satisfaction and comfort.
I use several gambling sites but so far I feel really good satisfaction because there are no problems whatsoever and I always get good responsiveness from the support of each site I use.

It is always better to report any problems that occur to the gambling site support because they can be handled more quickly and you can get the right solution.
Not all problems that occur can be sent by PM to their Bitcointalk account because not all customers themselves are members of this forum.

[kotajikikox]

Most Casinos will only accept a report if it has a viable security impact with a PoC and not a general report from a scanner tool.

I'd recommend asking the casino if they have a private bug-bounty program either internally or externally (i.e, operated by BugCrowd, HackerOne, intigriti)

I think if you follow the thread you will read all what OP wanted to elaborate here because he had given everything and even telling the people here what had happened and his only demand is at least a THANK YOU for what have he done for the team , take not the Money because we all need this at appreciation for what have you done good is for me a better giving here.

[carlfebz2]

Most Casinos will only accept a report if it has a viable security impact with a PoC and not a general report from a scanner tool.

I'd recommend asking the casino if they have a private bug-bounty program either internally or externally (i.e, operated by BugCrowd, HackerOne, intigriti)

I think if you follow the thread you will read all what OP wanted to elaborate here because he had given everything and even telling the people here what had happened and his only demand is at least a THANK YOU for what have he done for the team , take not the Money because we all need this at appreciation for what have you done good is for me a better giving here.

Sorry for the heads up on this one but i cant really just that easily accept that someone who do found a bug would really be just liking to have or get some THANKS.
Of course you would really be expecting something for some bounty based up on what you have found. The sad part when you do find an exploit which even if you do saw that its a major
one, you dont really receive any something in return but well they could really be able just simply tell you that the bug you have found is really just that minimal or something that critical.
Is there something you can do? of course none.