bustabit.com -- The Social Gambling Game

[DarKSpectrE]

Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

[Peegasus]

I tried it out today, this is a really fun and innovative game !

Agree with that.

I hope this site will be as easy to get btc.

[dooglus]

Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

I made screenshots of some of his more astonishing wins:

[DarKSpectrE]

Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

I made screenshots of some of his more astonishing wins:

Nice work, Dooglus.

I remember somebody who was online in the chat box last week claimed that he discovered an exploit in the mobile version of the game.

[shitaifan2013]

according to his profile he's been absent from this forum for 3 days now. I sent a mail to him & espringe on mp and on here, but so far no answer.

[elm]

how can Op run a site like this without knowing what is happening on his site? just dont understand this, but who am I

[inkha]

Probably in a turkey coma

[Josepht]

I think moneypot won't be able to pay out such a large amount.
And even if he could, I'd be surprised if he would.

[shitaifan2013]

how can Op run a site like this without knowing what is happening on his site? just dont understand this, but who am I

THIS!!!! What a bloody joke

you guys do realize that people need to sleep sometimes and that there was a holiday in the US?

[csmcanarney]

Relax, people. Ryan's most likely asleep as even on the East coast it's not even 7:00 yet and yesterday was Thanksgiving, a holiday most people in the US spend eating and drinking with their families. Shouting on the forums isn't going to make him wake up any faster.

I don't see why this would mark the end of MoneyPot, either. The damage that can be caused to the bankroll is limited to what's in the hot wallet.

[feryjhie]

Uh, take a look at this guy's chart. It seems to me that he's cheating. Ryan might want to investigate this.

https://www.moneypot.com/user/foo

I made screenshots of some of his more astonishing wins:

now he is on 25 BTC Profit

[RHavar]

Sorry guys, I was asleep! Thanks for letting me know. Foo did find an exploit, and was kind enough to reveal it. I have quickly pushed up a fix, and purged Foo's games from the database to preserve meaningful stats.

Foo used quite a clever exploit in some what should be dead code: http://privatepaste.com/354dae40cd

I'd like to thank him for not abusing the bug further, or slowly bleeding me over time. I'm extremely thankful for that, that would have been a nightmare situation. Thanks Foo!

Sorry about all the drama people, please enjoy the game.

[RHavar]

Remember these guys want you to possibly invest I'm the bankroll in the future also, don't trust shoddy coding.

Had it been the same scenario, it wouldn't have been a big issue: I'd obviously cover such expenses out of my own pocket first. Had the person been less honorable and slowly bleed the site and investors, it'd truly be a nightmare situation. I shudder just thinking about it. But I guess ultimately the price one has to pay to be +EV.

On the plus side, the code is on github for anyone to review and critique, and possibly even pay someone to audit it. If you read how his exploit works, I would argue it a very clever exploit that wasn't the result of shoddy coding, but using a non-obvious and clever way to leak information. Either way, I will slow things down and do a more comprehensive security audit and hardening of everything, including adding some non-public alarms and triggers for suspicious behavior.

[RHavar]

Yeah, he said he was willing to put the code available online as a lot of work went into it. I'd be extremely interested in seeing it. Some of the timing stuff would be rather challenging to pull off

[RHavar]

Foo has provided me with his exploit code:

http://privatepaste.com/164b29a720
http://privatepaste.com/9c14190b93
http://privatepaste.com/f4ebeb9b19


Highly impressive stuff! Hats off to you foo!

[chaoman]

perhaps I should just have more patience, but I deposited 900,000 satoshi from prime dice directly into money pot and it is yet to show up.

[james.lent]

Glad there's still good guys out there, kudos Foo.

[DarKSpectrE]

Foo has provided me with his exploit code:

http://privatepaste.com/164b29a720
http://privatepaste.com/9c14190b93
http://privatepaste.com/f4ebeb9b19


Highly impressive stuff! Hats off to you foo!

Mindblown!

[SpreadBit]

Tried it with 2mBTC, got a profit of 1.34x
nice game.

[james.lent]

Foo has provided me with his exploit code:

http://privatepaste.com/164b29a720
http://privatepaste.com/9c14190b93
http://privatepaste.com/f4ebeb9b19


Highly impressive stuff! Hats off to you foo!

Mindblown!

Alien language to me