I've Made Millions abusing Exploit in a Crypto Casino - AMA

[Fivestar4everMVP]

One question. Do you still see the site around?

It was not ethical in the sense that you were a close group and you were trusted by the dev team to help them. When you saw the hole, you were supposed to inform the management about it. Anyway, ethics does not have a fix rules book. The standard varies from individual to individual.

Well, op did refer to casinos as a shady business where the owners of the site don't care or give any damn about their customers as all they want is money and more money, and would do anything to milk their customers dry - as stated by the op.

So, judging by that statement alone, it's easy to understand that even if op had any intentions of letting the casino management know about that hole, which such a mindset he developed, which made him believe that casino is a shady business and all, his intensions of letting the casino know of that whole is already defeated completely since thats one way to grow a natural hate for something or a certain group of people.
OP believes that those who run gambling casinos are heartless towards their customers and their money, so, with that hole, it's an opportunity to pay the owners of that casino back in their own coin.

[1715023261]

1715023261

[1715023261]

1715023261

[EarnOnVictor]

Hello Bitcointalk community,

Glad to be back for another peek. It's been awhile. I used to be active back in 2013/14. It's been exactly 10 years since I found a major exploit in a bitcoin casino and abused it to accumulate over $1M+ back in 2014.

Thought it would be fun to do an AMA, might be interesting for the community 

You were exploitative and you are proud of it? No wonder casinos are strict with some rules. I even checked your profile here, but it doesn't reflect the time you claimed you started here, or maybe I didn't get you clearly. It might be you mean the activeness with the exploitative means, but I do not think it is the best especially if you have a conscience.

It might be possible at that time you perpetrated it because it's been long, but now, it will be difficult to exploit a casino, not to mention that casinos have enough brains working for them now that will be blocking every style that can be exploitative in nature. This will even put the account of the gambler in danger which makes it not advisable to follow your path.

Needless to say, you stylishly advertise AMA, just don't think we do not know. Well, I've gone through the website, and it could be productive for those who need such services.

[bitcasinorank]

Was it you?
https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d

[Wapfika]

This is a hard story to believe without news articles detailing the hack and some sort of evidence that you’re the one who ended up with the coins. In any event, I hope you didn’t cause too many people too much pain from the stolen funds and managed to do something positive with the ill gotten gains.

Primedice experience a major hack before way bay 2014 when I’m still not a forum member. I’m not sure if the OP is really the one who hack them but this news is very popular back then since 1M$ is very huge because casino bankroll back then especially dice site is only small.

I dig some news about it and found out this https://www.reddit.com/r/Bitcoin/comments/3bh6dr/breaking_the_house_hacker_exploits_primedice_for/ discussion on reddit that matches what the OP describing.


@OP, what coins you are holding right now using your funds and by any chance, Can you provide sign message to the Bitcoin wallet address that you use to receive the hack funds?

[Cantsay]

Was it you?
https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d

That was a nasty article to read. I`m not sure if this article was actually written because of the bug the OP said he exploited, but if he did, then it is certain that the OP has no conscience, and if given the opportunity to kill someone else for monetary gain, he`d do it with a smile on his face.

I have responded twice to this thread, thinking it was just a minor case or one that the OP would later want to sell his so-called bug to users. I had no idea that it was this big that Primedice had to write a whole article about it.

[RHavar]

Do you talk about Bustabit? I am curious because I have heard that bustabit.com in 2014 had bug where you were always winning at 1.01%, it was the lowest crash. Were you using that bag to bet many bitcoins and profit? If this is true, then when you say that you made millions, did you made millions in 2014 or what you earned back then is more than a million today because of bitcoin's price?
I will be glad if you share the name of casino and the way you abused their system, you are anonymous, so I assume you are safe.

Bustabit never had such a bug. In bustabit v1 there was a pvp bonus system which rewarded you for cashing out after other players, but before the crash. At certain times it was profitable to bet at 1.01x if the players you were playing against were going for high multipliers (i.e. not cashing out often). This strategy could be trivially be defeated by other players cashing out after you (e.g. 1.02x).

 However this was a very explicit part of the game, and there were never any bugs around it. 

[spiker777]

I don't think anyone will be interested in learning how to abuse a casino to make money out of it. We need profit, but it should be done the right way.
 

Probably people like himself will find it interesting to find out how he did that. so they could do that too. honest and legit people would never do such acts for financial gains,
But I don't think he have any such method at all. he's probably one of those scammers who want greedy people to dm him to find out then he'll ask them to send him a fee to reveal the secret and anyone who does will end up getting scammed.  

[hopenotlate]

Was it you?
https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d

Still remember those incredible days, there are indeed good odds  OP could be hufflepuff even if the way he explained that he had abused the system was a bit different from the one explained by Stunna in that medium article.

[Easteregg69]

I have some claims on also. I get my beer.

[blockman]

• Do you still have remaining money from that?
• Did it crossed to your mind of returning the money and/or felt any guilt on what you did?
• Did you reinvest it? If yes, to which?
• Are you retired because of that money?
• How can you prove that you actually have taken millions with that exploit? Since it's the hardest part of the question, I wonder how can you.

Main question: How was the exploit performed?

The casino used provably fair dice game. They were about to release new version for their site, before release they had separate beta website for small group of players to test and look for bugs before the final version would be released. I was one of those players who got access to the beta testing site. Finally the testing period was over and new version of the site was released to the public. The beta site was still online. The mistake that the casino made was that beta site account and main public site were sharing identical server seed. Meaning that i could reveal the server seed on the beta website while still having it active unrevealed on the main site. The way probably fair works is that with revealed server seed i could calculate all the future dice rolls before they would happen. And thats what i did. I did it for over 2 months i believe. I abused it in a way where it really looked like at the end i was just getting lucky and that the EV would catch up in the end. Over 2 month + period i was withdrawing big amounts in btc totalling thousands of bitcoins overall.


1. I still have majority of thay money.
2. I never felt guilt or wanted to return the money. Casino is a very shady business and the owners of these platforms dont care about their players or their losses and will do anything to milk their customers out of their last dollar. So i feel no sympathy. I outplayed them at their own game.
3. I did diversify my btc investment
4. Yes i am
5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

That makes sense and you don't have to sign the wallet just to prove it. I've read more than enough explanation and that already gave me an idea on how it went. Someone who's going to make a story without a sense won't waste his time answering these questions. While everyone is starting to give the idea on what this casino was and the clues are there.

One question. Do you still see the site around?

I think that he still sees it.

It was not ethical in the sense that you were a close group and you were trusted by the dev team to help them. When you saw the hole, you were supposed to inform the management about it. Anyway, ethics does not have a fix rules book. The standard varies from individual to individual.

I agree, he's chosen to be part of the beta testing group and should have told the holes that have remained. But then, that's him. Anyway, I appreciate him answering all of my questions and have told the story on how it went.

[Ojima-ojo]

Regardless of what happens or become of the casinos, it wrong for a gambler to abuse the casino and any of such act is regarded as stealing from the casino, so you cant expect us to welcome such act or accept this kind of service at any point in time, bug abuse is one of the things that casinos doesn't take with levity and for that we have to avoid using such problems against them.


So the best thing to do is to report such incidents once we discover them on the casinos, and may be regardless of whatever it depends so much on the individual whether they can abuse the casino or not.

[Obari]

Let me guess - you want someone to offer you a certain amount of money so that you can show them your so called money printing scheme, right?

We have seen a lot of this type of thread pop out, so if you think you’ll come across anyone that would be greedy to the extent that they’ll message you to get your fake exploit then you better start rethinking.

Funny how people think we are still very gullible to fall for every cheap offer we see out here and one funny thing about these things is that, people who have a means to make huge amounts illegitimately wouldn’t ever bother to spit it out as they wouldn’t want to leak the channel and get it possibly closed and secondly, these casinos are already getting really security conscious and it will be very difficult to steal from casinos and that’s why we’ve barely heard about loops or stealing from casinos in recent times as compared to the previous time.

I don’t want to be in a haste to draw conclusions on the fellow but since you’ve been here previously, why not make the post with your aged account as it will be more easier that way to get attention as compared to the attention you’ll get with a newbie account .

[hopenotlate]

-snip-

Bustabit never had such a bug. In bustabit v1 there was a pvp bonus system which rewarded you for cashing out after other players, but before the crash. At certain times it was profitable to bet at 1.01x if the players you were playing against were going for high multipliers (i.e. not cashing out often). This strategy could be trivially be defeated by other players cashing out after you (e.g. 1.02x).

 However this was a very explicit part of the game, and there were never any bugs around it. 

Derailing a bit the thread here, apologize in advance.
Maybe I don't remember things correctly but weren't you the business owner of moneypot game when or happener there was a player that was exploiting the game in a way you (or the business owner of it wasn't you) defined "smart"?
 I remember  it was related to the game latency and that player was using a script that allowed him to cash out before the very istant the game was busting ( so the last available multiplier was revealed ) taking advantage of that latencyand setting the desired multiplier in that moment.
I witnessed him playing and he was warning other players in chat not to follow him on his bets because otherwise they would have gotten hurt.
Maybe I'm confusing a bit things but remember for sure this kind of exploit happened.

[tabas]

Was it you?
https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d

Prolly him.
It matches the story that he just told and if this is the real him then he's hufflepuff.

My question is:

Why didn't you report the bug if you were there as a tester?

He answered it that he never wanted to return any money and that's what on his mind to just keep on abusing the system while he can until he's busted but never did.

2. I never felt guilt or wanted to return the money. Casino is a very shady business and the owners of these platforms dont care about their players or their losses and will do anything to milk their customers out of their last dollar. So i feel no sympathy. I outplayed them at their own game.

If he's the real guy based on the article, then it's known on which dice site he has exploited. But with skeptical minds, we've got a thought on this one that the guy(OP) might just know the story and trying to claim that it was him. Otherwise, it was really him.

[pahahaha]

I don't think anyone will be interested in learning how to abuse a casino to make money out of it. We need profit, but it should be done the right way.
 

Probably people like himself will find it interesting to find out how he did that. so they could do that too. honest and legit people would never do such acts for financial gains,
But I don't think he have any such method at all. he's probably one of those scammers who want greedy people to dm him to find out then he'll ask them to send him a fee to reveal the secret and anyone who does will end up getting scammed.  

I have already explained how I was able to do the bug. It has been patched years ago and there is no use for anyone messaging me for anything.


Btw - Nice casino that you are promoting

[pahahaha]

Regardless of what happens or become of the casinos, it wrong for a gambler to abuse the casino and any of such act is regarded as stealing from the casino, so you cant expect us to welcome such act or accept this kind of service at any point in time, bug abuse is one of the things that casinos doesn't take with levity and for that we have to avoid using such problems against them.


So the best thing to do is to report such incidents once we discover them on the casinos, and may be regardless of whatever it depends so much on the individual whether they can abuse the casino or not.

The casinos are abusing its players 24/7, if you believe that they are the good guys then you are really wrong. They are dirt-bags that will use illegal ways to get money out of your pocket. I didn't do anything as bad as what they are doing to their own customers.

[notblox1]

Glad to be back for another peek. It's been awhile. I used to be active back in 2013/14. It's been exactly 10 years since I found a major exploit in a bitcoin casino and abused it to accumulate over $1M+ back in 2014.

Sure you did 
Show us some actual proof or it never happened, except maybe in your imagination.

Just imagine how bad hacker you have to be to come back ten years later to brag about what you did with new account, sound like a bad fantasy tale. 

[Saisher]

It is already three pages but until now OP has not named the casino or any proof of what he is claiming, he just wants to stir a conversation and just want to establish a reputation, but it's not going to work here, if you are good at what you claim a proof is necessary, people are not that gullible to believe in what you're saying, you don't go here brag, people are not easily swayed by claims without proof.

[wiss19]

So, what made you come back? Have you spent all the money and looking for another loophole somewhere?  Are you currently exploring all the casino platforms and trying to find the same exploit that you used back in the day? How did you do it back in 2024? I would want to know just for knowledge.

Consider all the questions I've asked above a part of the AMA that you are willing to start. A lot of people will ask a lot of questions since it's a public forum and it promotes freedom of speech. You can answer the ones that you find interesting and that you think will generate a fun answer from you for the community to read.

That being said, I'm in no way in favour of such things and I believe it's thievery when you find a bug or an exploit in a platform and use that to earn a lot of money that the platform will pay from its pocket. They work hard for this money if they are running a legitimate business.

[RHavar]

Derailing a bit the thread here, apologize in advance.
Maybe I don't remember things correctly but weren't you the business owner of moneypot game when or happener there was a player that was exploiting the game in a way you (or the business owner of it wasn't you) defined "smart"?
 I remember  it was related to the game latency and that player was using a script that allowed him to cash out before the very istant the game was busting ( so the last available multiplier was revealed ) taking advantage of that latencyand setting the desired multiplier in that moment.
I witnessed him playing and he was warning other players in chat not to follow him on his bets because otherwise they would have gotten hurt.
Maybe I'm confusing a bit things but remember for sure this kind of exploit happened.

Yeah, your recollection is right. There was a full postmortem somewhere in the bustabit thread, but I can't find it right now. But basically the guy found a (subtle!) bug in an unreleased feature (changing the auto-cashout mid bet) which allowed him to cashout just before the game busted.  I was extremely fortunate that the person who discovered this bug just wanted to claim a fair bounty and didn't try bankrupt me (which he easily could have).