2UP.io | No-KYC Crypto Casino & BTC Sportsbook | Fast Withdrawals + 200% Bonus

[khaled0111]

Glad to hear that this problem has been solved and that the affected users got their money back.
This incident may serve as a reminder not to take account security lightly especially if money is involved. The first thing anyone should do after creating an account is to activate all security features and especially 2FA.
Maybe, after this incident, the 2UP team will consider making 2FA mandatory and not optional.

[noorman0]

I'm curious about the hacker's intentions if he wasn't draining users' balances and was only interested in general casino games. I can't imagine how he could have placed bets with different accounts in such a short period of time.

I'm glad to hear that no significant losses resulted from this incident.

[BitcoinHunt3r]

I'm curious about the hacker's intentions if he wasn't draining users' balances and was only interested in general casino games. I can't imagine how he could have placed bets with different accounts in such a short period of time.

Their main target is obviously to take the money but they can't do it because security code works for withdrawal so maybe because they were a bit angry they used that balance
For things that make you wonder they must be using something for example using a Bots or something like that yeah this is not a new method I have seen it since 2015 on other sites
Another reason yeah sometimes this is just for testing by hackers on new sites therefore generally new sites will provide a Bug Bounty program.

[Eladzis]

Balance no longer showing, getting "network is unstable please refresh the page" error message?

Edit: my bet history is all gone or inaccessible as well as my player stats/withdrawals or history,.


I don't use 2fa only email so given what's been happening I think anyone should use the site with caution atm. I have no idea if I was hacked or this is some kind of precaution.

Also this is not getting into the account through the user but the website itself which is extremely concerning,

[Eladzis]

Im just going to double post instead of editing again but false alarm I just had to clear my cache. Just unfortunate timing lol

[Don Pedro Dinero]

I can’t recall a case like this involving an attempted mass hack on casino accounts in all the time I’ve been on the forum.

This feature automatically enabled when creating an account while if they want extra security they have to activate 2FA
I remember interesting feature in another casino, so when we have a balance, a warning popup will appear to activate 2FA well, maybe this is a good idea to implement here.

That’s right, that’s the lesson I’ve learnt from the whole affair.

The 2up.io team was outstanding, quickly addressing the issue and resolving it. I believe the casino genuinely wanted to protect its users, but due to the hackers actions, Some users were affected. However, team quickly worked hard and everything returned to normal.

I’m glad the story had a happy ending, with people reporting that they can now access their account balances, and some have even received a bonus for the inconvenience.

[Russlenat]

This is the kind of casino that should be patronized, since they are doing their job to make sure players are protected.

Unexpected things can happen, that is normal. But what matters is how the casino responds. If they are able to make the right move, correct the errors, and satisfy the affected users, then that says a lot about how they handle problems.

This kind of challenge is where trust is tested, and they passed it with flying colors. Those who were affected and had their issues resolved will most likely recommend 2UP to their fellow players.

[suzanne5223]

I can understand you're going through, but i would like to know if you have done some research about how session hijacking/cookie theft operates?
Although we haven't heard back from the 2UP.io representative, I am just telling you the chance of what may have happened to your account and other users who didn't use the 2FA, so you won't keep your hope up.

TOTP 2FA doesn't make you immune to session hijacking though, and it can still be bypassed. This is because when bad actors steal your session cookie, it is when it's already in a logged-in state. In other words, there is no need to enter the code because you are already logged-in.

However, for withdrawals, it won't work anymore as another code will be asked unless there is another attack vector.

Yes, 2FA does not make anyone immune to session hijacking/cookie theft, and to be honest, 2FA alone won't do the job because the user also has a role to play. Despite 2FA and all the roles the user has to play, no one is 100% immune to session hijacking/cookie theft, but the chance of being a victim is low, and it is better to be secure conscious than being sorry.

[mirakal]

So all the problems have already been resolved, right?

I hope we can see an announcement here about the result of the investigation. So far, based on my observation, no more complaints have appeared already, so maybe we can assume they were already compensated for their losses due to the hack.

All those recommendations, especially enabling 2FA, are very important to minimize the risk. Maybe it is time for us to really take our accounts seriously, because we never know when we might hit big. And if that happens, we would want our account to stay safe from this kind of hack.