I've Made Millions abusing Exploit in a Crypto Casino - AMA

[goldkingcoiner]

Hello Bitcointalk community,


Glad to be back for another peek. It's been awhile. I used to be active back in 2013/14. It's been exactly 10 years since I found a major exploit in a bitcoin casino and abused it to accumulate over $1M+ back in 2014.


Thought it would be fun to do an AMA, might be interesting for the community 

I am a bit of a pessimist so I would have to say that that sounds like a fib without any evidence. Although it may very well be true.  Lucky for us, there is a simple way to know. You can tell us exactly how you did it. If the exploit no longer works, then there is no disadvantage of making it public, right? And since you already have your money, you don't need to worry about your funds and/or casino account being frozen.

I personally would love to know more about early casino exploits and how casinos have changed over time. I assume that you targeted brand new casinos that were just starting out in an experimental fashion.

[1715010077]

1715010077

[CryptSafe]

Glad to be back for another peek. It's been awhile. I used to be active back in 2013/14. It's been exactly 10 years

Are you Ban invading or you forget your old login details ??

I do not think OP would use his or her real account for such advert here as this post looks so awkward.  OP knows the gravity of this post he or she has made and would not take the risk of revealing his or her identity to the public. So coming up with a quick story losing or unable to access the original account would need OP response. This type of situations are very sensitive because of the amount and manner at which it was gotten. If OP had used his or her real account,  I believe by now OPs real identity would have been revealed and possibly the casino might likely be identified.

[robelneo]

Let me guess - you want someone to offer you a certain amount of money so that you can show them your so called money printing scheme, right?

We have seen a lot of this type of thread pop out, so if you think you’ll come across anyone that would be greedy to the extent that they’ll message you to get your fake exploit then you better start rethinking.

This exploit worked back in 2014. It hasn't worked for over 10 years. I am not looking for anything from anyone, I've got plenty of coins. Just looking to stir up interesting conversations and answer some interesting questions.

So far you haven't dropped anything that will make us believe this is true, there's been so many questions now but no answer if you're someone that good at what you claimed then you should post screenshots, articles, or backstory that will prove how good you are, anyone can sign up here and claim that they've made millions doing something, for all, we know you're just a beggar living in a fantasy and using this forum as your platform in your fantasy and trying to build his reputation so cut the crap and drop all proofs that you've got.

[letteredhub]

Hello Bitcointalk community,


Glad to be back for another peek. It's been awhile. I used to be active back in 2013/14. It's been exactly 10 years since I found a major exploit in a bitcoin casino and abused it to accumulate over $1M+ back in 2014.


Thought it would be fun to do an AMA, might be interesting for the community 

Are you in search of disciples to your course and I guess this ain't free as you are gonna request they pay some token for the so-called secret you want to expose to their knowledge.  Hey guy, wake up, this is 2024 not 2014, a lot has happened and bluffs like this to attract naive users has died out. There am many acceptable ways to make profit online in the forum  and maybe you need to check the service board to know where your legit service may be of profound value to you than casino abuse.

[Assface16678]

Hello Bitcointalk community,


Glad to be back for another peek. It's been awhile. I used to be active back in 2013/14. It's been exactly 10 years since I found a major exploit in a bitcoin casino and abused it to accumulate over $1M+ back in 2014.


Thought it would be fun to do an AMA, might be interesting for the community 

Are you in search of disciples to your course and I guess this ain't free as you are gonna request they pay some token for the so-called secret you want to expose to their knowledge.  Hey guy, wake up, this is 2024 not 2014, a lot has happened and bluffs like this to attract naive users has died out. There am many acceptable ways to make profit online in the forum  and maybe you need to check the service board to know where your legit service may be of profound value to you than casino abuse.

He came from nowhere and stated something about his old account, or at least he provided proof, right? And for the so-called explotation, what he said is just a bluff until he provides evidence; it's easier to say than to prove. Even I can say that I gained millions of dollars exploding a crypto casino, but where is my proof? So it's clear that OP is bluffing, maybe just to attract people to notice him and boost his account. You can see from his engagement that he is clearly a new user or account. And even if it's true, then why are you still here, right? You should not be in this forum if you have something as big as millions of dollars. I don't know why many users here are creating such a bluff story just to create a topic and be noticed. Little do they know, people here are not easily convinced or fooled.

[shield132]

Let me guess - you want someone to offer you a certain amount of money so that you can show them your so called money printing scheme, right?

We have seen a lot of this type of thread pop out, so if you think you’ll come across anyone that would be greedy to the extent that they’ll message you to get your fake exploit then you better start rethinking.

This exploit worked back in 2014. It hasn't worked for over 10 years. I am not looking for anything from anyone, I've got plenty of coins. Just looking to stir up interesting conversations and answer some interesting questions.

Do you talk about Bustabit? I am curious because I have heard that bustabit.com in 2014 had bug where you were always winning at 1.01%, it was the lowest crash. Were you using that bag to bet many bitcoins and profit? If this is true, then when you say that you made millions, did you made millions in 2014 or what you earned back then is more than a million today because of bitcoin's price?
I will be glad if you share the name of casino and the way you abused their system, you are anonymous, so I assume you are safe.

[Ojima-ojo]

Let me guess - you want someone to offer you a certain amount of money so that you can show them your so called money printing scheme, right?

We have seen a lot of this type of thread pop out, so if you think you’ll come across anyone that would be greedy to the extent that they’ll message you to get your fake exploit then you better start rethinking.

This exploit worked back in 2014. It hasn't worked for over 10 years. I am not looking for anything from anyone, I've got plenty of coins. Just looking to stir up interesting conversations and answer some interesting questions.

Do you talk about Bustabit? I am curious because I have heard that bustabit.com in 2014 had bug where you were always winning at 1.01%, it was the lowest crash. Were you using that bag to bet many bitcoins and profit? If this is true, then when you say that you made millions, did you made millions in 2014 or what you earned back then is more than a million today because of bitcoin's price?
I will be glad if you share the name of casino and the way you abused their system, you are anonymous, so I assume you are safe.

At a point i wanted to waste time listening to the ops but i realize that the thread content is full of bullshit that i fine hard to believe or even trust the ops in any ways, since I am not looking for any bug to abuse any casino because most importantly is the ability to make such abuse without being caught by the casino, even if there is any bug in the system, it won't still add up before the casino will discover the bug and for that possibility, we need to avoid any service that promises any form of possibilities of that happening.


I don't know why anyone would want to take such a risk in terms of betting with the mindset that you can abuse a system even though there is a possibility or incident leading to that or making that possibility happen.

[pahahaha]

I am clarifying again that I did not create this thread to benefit financially in anyway from any user nor i have any ill intentions.


I will start answering questions, without revealing too much on who I am and which casino the exploit took place in.

• Do you still have remaining money from that?
• Did it crossed to your mind of returning the money and/or felt any guilt on what you did?
• Did you reinvest it? If yes, to which?
• Are you retired because of that money?
• How can you prove that you actually have taken millions with that exploit? Since it's the hardest part of the question, I wonder how can you.

Main question: How was the exploit performed?

The casino used provably fair dice game. They were about to release new version for their site, before release they had separate beta website for small group of players to test and look for bugs before the final version would be released. I was one of those players who got access to the beta testing site. Finally the testing period was over and new version of the site was released to the public. The beta site was still online. The mistake that the casino made was that beta site account and main public site were sharing identical server seed. Meaning that i could reveal the server seed on the beta website while still having it active unrevealed on the main site. The way probably fair works is that with revealed server seed i could calculate all the future dice rolls before they would happen. And thats what i did. I did it for over 2 months i believe. I abused it in a way where it really looked like at the end i was just getting lucky and that the EV would catch up in the end. Over 2 month + period i was withdrawing big amounts in btc totalling thousands of bitcoins overall.


1. I still have majority of thay money.
2. I never felt guilt or wanted to return the money. Casino is a very shady business and the owners of these platforms dont care about their players or their losses and will do anything to milk their customers out of their last dollar. So i feel no sympathy. I outplayed them at their own game.
3. I did diversify my btc investment
4. Yes i am
5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

[pahahaha]

Let me guess - you want someone to offer you a certain amount of money so that you can show them your so called money printing scheme, right?

We have seen a lot of this type of thread pop out, so if you think you’ll come across anyone that would be greedy to the extent that they’ll message you to get your fake exploit then you better start rethinking.

This exploit worked back in 2014. It hasn't worked for over 10 years. I am not looking for anything from anyone, I've got plenty of coins. Just looking to stir up interesting conversations and answer some interesting questions.

Do you talk about Bustabit? I am curious because I have heard that bustabit.com in 2014 had bug where you were always winning at 1.01%, it was the lowest crash. Were you using that bag to bet many bitcoins and profit? If this is true, then when you say that you made millions, did you made millions in 2014 or what you earned back then is more than a million today because of bitcoin's price?
I will be glad if you share the name of casino and the way you abused their system, you are anonymous, so I assume you are safe.

It was not bustabit, however bustabit did have plenty of bugs back in the day

[Cantsay]

I will start answering questions, without revealing too much on who I am and which casino the exploit took place in.

Few questions for you;

• Is the site still operational up till this day?
• Did they ever suspect your account and block it?
• If the answer to 1 is "yes" and 2 is "No", can you still access your account in the site?

[crwth]

I thought this was like Jimmy Zhong when he discovered something that he exploited on a website when withdrawing and double-clicking it or something.

5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

To prove that you own those coins, you should sign them with a wallet that contains your coins. That's the only way.

[nakamura12]

Not ban evading. Never been banned on the forums. I don't have access to the old account.

If you have ahy details that you have used before like a wallet for example and you still have access to it then maybe your old can recovered. Anyway, don't mind me asking but did the casino found out about you found a major exploit that lets you earn lots of money?. Did they also able to fix it?. Not that I care about the casino but what's your goal or aim here sharing to everyone that you found a major exploit in a casino?.

[Danydee]

 2014 you say !

This is a hard story to believe without news articles detailing the hack and some sort of evidence that you’re the one who ended up with the coins. In any event, I hope you didn’t cause too many people too much pain from the stolen funds and managed to do something positive with the ill gotten gains.

 This might be not necessary a hack, some times it can be there some (maneuvers) that bugs/cancels requirements for unlocking bonuses (that can be huge) ! ..  And the anonymity over crypto-casinos facilitate exploiting that bugs near unlimitedelly.

 Sometimes that bugs are too simple lets serious suspicions over that they are actually inside job! In way, someone from inside have made it to be able to profit from it anonymously.  The way that there are no technical maneuvers needed or that it can look like just a very gross mistake is just to blur hints over who's the instigator!

 
 In anyway in the case of just miss coding/ bug from the casino, I don't really see them go contacting journalists to talk about it ! 

[acroman08]

The casino used provably fair dice game.
-snip

you mentioned that the casino has a dice game, was it primedice.com or pocketdice.io? they are the only dice casinos I know that were popular at that time.

The way probably fair works is that with revealed server seed i could calculate all the future dice rolls before they would happen.

how do you calculate future dice rolls from a revealed server seed?

[seoincorporation]

5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

To prove that you own those coins, you should sign them with a wallet that contains your coins. That's the only way.

If he sign a message with stolen coins it would be the most dumb move of 2024...

What i don't get is how they used the same seed, it has sense that you were able to exploit it if you could predict the outcome of the next bets, but as a developer, i could say that seed should be generated in a random way.

My question is:

Why didn't you report the bug if you were there as a tester?

how do you calculate future dice rolls from a revealed server seed?

I can answer this one. Most of the provably fair sites works the next way:

You take the "Server seed" then "nonce" and the "user seed", then make a sha256, then take the last 4 digits, and that's the result of the roll. But people can't do it because the server seed is secret.

[yahoo62278]

5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

To prove that you own those coins, you should sign them with a wallet that contains your coins. That's the only way.

If he sign a message with stolen coins it would be the most dumb move of 2024...

What i don't get is how they used the same seed, it has sense that you were able to exploit it if you could predict the outcome of the next bets, but as a developer, i could say that seed should be generated in a random way.

My question is:

Why didn't you report the bug if you were there as a tester?

how do you calculate future dice rolls from a revealed server seed?

I can answer this one. Most of the provably fair sites works the next way:

You take the "Server seed" then "nonce" and the "user seed", then make a sha256, then take the last 4 digits, and that's the result of the roll. But people can't do it because the server seed is secret.

I was thinking the site might be luckyb.it for a second as there were a few of us that had private access to test dice for their launch, but LB didn't launch dice in 2014, more like 2019-2020.

@OP is the site reputable? 2014 there weren't a ton of dice sites around. Bitsler, fortunejack, primedice, 999dice, satoshi dice, maybe some apps on moneypot.

[Danydee]

... 2014 there weren't a ton of dice sites around. Bitsler, fortunejack, primedice, 999dice, satoshi dice, maybe some apps on moneypot.

Bit777, 777coin, crypto-games . net ...  

Ja,,,, Fortunejack binary trading very good very nice ! 

[dansus021]

Let me guess - you want someone to offer you a certain amount of money so that you can show them your so called money printing scheme, right?

Most likely I think he just same like the other who want to give some trading signal with guaranteed profit but you need certain amount of money to buy the signal.
I mean if I were the OP i just keep exploit the casino If i were the Black hat hacker or I tell the casino and turn as white hacker.

and if this free AMA just tell us How haha

[cwil]

Can you sign 14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp?

If that's you, your description of the exploit doesn't match up with the official version published by the casino.

[AB de Royse777]

I am clarifying again that I did not create this thread to benefit financially in anyway from any user nor i have any ill intentions.


I will start answering questions, without revealing too much on who I am and which casino the exploit took place in.

• Do you still have remaining money from that?
• Did it crossed to your mind of returning the money and/or felt any guilt on what you did?
• Did you reinvest it? If yes, to which?
• Are you retired because of that money?
• How can you prove that you actually have taken millions with that exploit? Since it's the hardest part of the question, I wonder how can you.

Main question: How was the exploit performed?

The casino used provably fair dice game. They were about to release new version for their site, before release they had separate beta website for small group of players to test and look for bugs before the final version would be released. I was one of those players who got access to the beta testing site. Finally the testing period was over and new version of the site was released to the public. The beta site was still online. The mistake that the casino made was that beta site account and main public site were sharing identical server seed. Meaning that i could reveal the server seed on the beta website while still having it active unrevealed on the main site. The way probably fair works is that with revealed server seed i could calculate all the future dice rolls before they would happen. And thats what i did. I did it for over 2 months i believe. I abused it in a way where it really looked like at the end i was just getting lucky and that the EV would catch up in the end. Over 2 month + period i was withdrawing big amounts in btc totalling thousands of bitcoins overall.


1. I still have majority of thay money.
2. I never felt guilt or wanted to return the money. Casino is a very shady business and the owners of these platforms dont care about their players or their losses and will do anything to milk their customers out of their last dollar. So i feel no sympathy. I outplayed them at their own game.
3. I did diversify my btc investment
4. Yes i am
5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

One question. Do you still see the site around?

It was not ethical in the sense that you were a close group and you were trusted by the dev team to help them. When you saw the hole, you were supposed to inform the management about it. Anyway, ethics does not have a fix rules book. The standard varies from individual to individual.