Finding a Bug

[fapar]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

[BenCodie]

If it is a user interface bug, expect no more than a pat in the back. If it is a non-exploitable/non-vital platform bug, don't expect a reward but it should be more likely to get one as it may help patch a hole in leaking/lost business as a result of the bug. If it is an exploitable bug, it should definitely be rewarded.

That's my 2 cents generally...however...

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).

BC Game. I messaged them on here yesterday but no response

...I wouldn't count it from this casino. They've been known to hold balanced and freeze funds for extended periods of time, until they suddenly had someone come and solve all problems months later. If you didn't message that account handling their "PR 2.0" (so to speak) then you can do so here:
https://bitcointalk.org/index.php?action=profile;u=3592321 - This profile is the support account. The OP of their thread is (apparently) for some other purpose.

[abel1337]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

[paxmao]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

[dezoel]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Before reporting a bug in a casino, it's important to check whether they have a bug bounty program in place. If they don't, it's unlikely that they will reward you for finding a bug and they may even ignore who reports it so it's up to you if you still want to report that bug. You can ask them beforehand if they offer any credits for reporting bugs. If they do, then you should cooperate with them and assist them in fixing the bug. Once the bug is fixed, you can expect to receive your reward if there is one.

In our forum, there are several reports about a user claiming that they haven't paid for the bugs that they find despite of the site having a bug bounty. If they don't like the report, they can always reply and explain, not that they ignore the message or they just "seen" it.

We don't know though, maybe they are only talking advantage of it for free. Then there is that platforms who don't put a bug bounty message but if we inquire them, they are glad to offer some incentives. I think they have a reason for this like they don't want the public to know that their site is buggy, as they are afraid that someone can take advantage of it personally.

[cafter]

I also had that idea of earning something by reporting bug or mistake on the site.
wasted like some hours finding some page errors, spelling mistakes, more basic stuffs but do not found anything, I was finding basic things
because i didn't have programming or hacking knowledge. also if someone is ethical hacker and found a security bug then they can report it to the casino,

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

yes, maybe you waste you entire time and find nothing in the end.

[Reatim]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

[Sling0]

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

[Blowon]

On some sites you will get an award even if the bug is minor, let alone critical. but on some casino sites. like cheap casino websites or just starting out with small capital they think they won't pay you even if it's a critical bug unless you are a kind person who wants to volunteer something like that. If the bug comes from a large casino website with many communities, they will definitely pay you no matter how small the bug you get, you will be greatly appreciated. about how. I believe it is more effective to send them the email that is listed on their website.

[aioc]

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

I think you should gather all your pieces of evidence they mentioned that you would be compensated not a guarantee but at least they should give you an update and I honestly believe that you should be compensated, a bug is something that will cause big losses to any platform, if they ignore you and never give an update or compensation you should name the casino so we can question why they fail to compensate you on something that you deserves, if they promise you compensation then it deserves a thread in the scam section.

[goldkingcoiner]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should ask the casino. Depending on the severity of the bug and what you can do with it, your reward might be quite high. Also, remember: they know that if they do not pay you then you are not obliged to tell them anything. Furthermore, they know that if they do not reward bug hunters, those same people could simply sell the information to hackers and other shady characters. So it is in their best interest to reward you (but do not tell them this, because they might take it as a threat, which is illegal). Don't be afraid to haggle over the price and do not let them take you for a chump. Bugs can be very valuable. Although some bugs can be completely worthless.

[Fivestar4everMVP]

On some sites you will get an award even if the bug is minor, let alone critical. but on some casino sites. like cheap casino websites or just starting out with small capital they think they won't pay you even if it's a critical bug unless you are a kind person who wants to volunteer something like that. If the bug comes from a large casino website with many communities, they will definitely pay you no matter how small the bug you get, you will be greatly appreciated. about how. I believe it is more effective to send them the email that is listed on their website.

Well, the  actually truth of the matter is that, even some big gambling casinos are way more stingy than a start up, so, it still not every casino, whether big or small, that will be ready to pay for a bug that is minor, most won't actually, so what I think is, if the bug is minor, simply just point their eyes to it to get them notified, but don't expect any form of appreciation or reward.

But if it's a critical bug, like one that would allow hackers or even users use that bug as a means to steal from the casino real big, then some bug casinos definitely will reward a person for discovering such bug and not exploiting it, and some small casinos will also reward the person too based on their financial capacity.

But like I said before there are still some really big casinos that won't give a damn, what they did do is go behind you and fix the bug, and come back to tell you there was never a bug like that.

[fapar]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
 unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

This is actually "every medal has its reverse". That is, casinos want errors, if they exist, to be found and eliminated, and at the same time they are afraid that these errors will be used before they are published (transfered information to the casino about the existing error). In this case, of course, it is logical to hire a third-party company specializing in security, but this will incur greater costs than announcing a public bug bounty program, but at the same time it will be more reliable.

[SamReomo]

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

[Woodie]

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Most casinos would pay a bug bounty if the bug is critical, you should contact the support on the site and ask for the right way to report the bug, maybe the site has an special mail for that.

Easier said than done!

If am not mistaken there was a case here on the forum were one of the users did find a bug on one of the platforms and reported it and they claimed to have already known about and never paid this guy which makes this approach kind of a win-lose scenario as they could easily choose not to pay, and use your valuable bug report without you knowing...

And remember, if you exploit the bug your account will be closed and you will not get a bounty, that's why is important to report it as fast as you find it.

Talk without action yeilds no results!

Why not do it the white hacker way, exploit this bug into a test account and make so much money and then report it  and show them to what extent this can be used and then they can take this report seriously and possibly payup the bounty prize too...this way it's a win-win, they pay up and keep funds on test account or not pay and allow you accesss to the test account with bugged fund's  

[Dunamisx]

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

It's always something good to find a bug a d report such as appropriately needed, if we are to consider the gambling sector for now, we are not having more of the people interested in this and it's all because they have experience low rate from how this is actually happening, you may hardly get to find one, gamblers will be so focused on having their fun in using the casino than looking for bugs around when majority are even after winning their bets, we can therefore see this that it's not common and that rampart as before that they were being discovered, however, we shouldn't still relent from finding more because they still exist.

[Odusko]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

[Fivestar4everMVP]

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

It's always something good to find a bug a d report such as appropriately needed, if we are to consider the gambling sector for now, we are not having more of the people interested in this and it's all because they have experience low rate from how this is actually happening, you may hardly get to find one, gamblers will be so focused on having their fun in using the casino than looking for bugs around when majority are even after winning their bets, we can therefore see this that it's not common and that rampart as before that they were being discovered, however, we shouldn't still relent from finding more because they still exist.

Well, I think you are wrong, except I don't clearly understand what you mean, which I will apologize if that be case.

Gamblers aren't the ones who go bug hunting bud, developers are mostly the ones who do, what or how will a gambler without a developer experience possibly recognize a bug in a line of codes? Practically impossible.
So, while  gamblers are busy hunting for the next big winnings, developers are busy hunting for their next pay through finding bugs on already developed products.

And you are right with what you said that bug still do exist, they do, but not like before. Understand that technology have greatly improved the way websites are built this days, alot of things are now automated and not analogly done any more, this has greatly reduced the chances of human errors in codes, which is the bug we are talking about.

[paxmao]

If it is a user interface bug, expect no more than a pat in the back. If it is a non-exploitable/non-vital platform bug, don't expect a reward but it should be more likely to get one as it may help patch a hole in leaking/lost business as a result of the bug. If it is an exploitable bug, it should definitely be rewarded.

That's my 2 cents generally...however...

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).

BC Game. I messaged them on here yesterday but no response

...I wouldn't count it from this casino. They've been known to hold balanced and freeze funds for extended periods of time, until they suddenly had someone come and solve all problems months later. If you didn't message that account handling their "PR 2.0" (so to speak) then you can do so here:
https://bitcointalk.org/index.php?action=profile;u=3592321 - This profile is the support account. The OP of their thread is (apparently) for some other purpose.

Yes that seems like a very long shot to get anything from them since it seems they are not even treating some of their customers like they are supposed to. Try anyway to send a letter about the bug, but it may only be interesting to them if it is something that can actually be exploited and cause serious problems. Service problems or user experience bugs... do not bother.

[Quidat]

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depend on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

For sure before a casino is launched, there is what operators always do and that is make sure to test all the system of the casino systems to make sure they are bug-free because any casino that has a bug problem will likely not succeed in terms of revenue generations which is an integral part of the casino operation.
Some casinos even give incentives to expect bug hunters to run several private hunts on their systems before the site goes live, The majority of the casinos that crashed along the way are all doing so because of a lack of proper bug tests and exploitation of the system via the bug or other system failures.

Yes, most of the time on which these platforms are completely ready on the time that they do launch, only a few will really be having that kind of bounty program into those the public
if ever they would really be running one but its not really that something common on which they would really be making announcement if ever they would really be giving some rewards
but somehow people or users could really be able to experience some possible problems on which they might be able to encounter. So the best way to do is to report it to
support and tell them but never expect about bounty or reward not unless if it is really that a serious bug that had been found.