CoinJack - start your own blackjack casino!

[CryptoTV]

When should we expect an updated version? Thanks!

The dev has been sick the past few days (so has many other people).  He just replied back to me and should be taking a look at the bugs that was found.  He was super quick with fixing the other bugs I've found so I'm guessing he will be no different this time and should have a solution for this issue quickly.

Was the deposit issue fixed? I was up for a few hours was working fine, then just stopped working.

Yea have been having the same issue.  I'm sure the devs are looking into it as it is happening to everyone who has the script I think.

[1715118270]

1715118270

[1715118270]

1715118270

[johny1976]

CoinJack 1.2 just released. All bugs has been fixed.

Buyers PM me for update.

[CryptoTV]

CoinJack 1.2 just released. All bugs has been fixed.

Buyers PM me for update.

double down and splits are still not giving players the correct win amount.  As this is a game breaking bug, we need to get this straightened out right away.

[elm]

CoinJack 1.2 just released. All bugs has been fixed.

Buyers PM me for update.

double down and splits are still not giving players the correct win amount.  As this is a game breaking bug, we need to get this straightened out right away.

for now I am glad I didnt buy the script. those bugs shouldnt be there.

[CryptoTV]

Welp guys, dont buy this script.  Just got hacked, all my wallets just got wiped.

The dude made fake deposits and then real withdraws.

I assume your TOS on refunding wiped coins from hacks applies to my situation.  I would recomend anyone who has bough this script to move your coins asap until this is fixed.







One of the 4 sites had the updated 1.2 Coinjack so the bug in the current version also.

[elm]

what is the damage in btc?

[johny1976]

CryptoTV, I've sent you PM. Please respond as soon as possible so I can know what exactly happened.

Sales has been stopped until this is solved. .. fixed in 1.4. Sales are restored.

Johny

[randayh]

I was able to isolate and correct the negative withdraw exploit bug last night. This problem impacts all your software.

Update content/ajax/_withdraw.php

Replace line:

if (!is_numeric($_GET['amount']) || (double)$_GET['amount']>$player['balance'] || (double)$_GET['amount']<$settings['min_withdrawal']) {

With Line:

if (!is_numeric($_GET['amount']) || (double)$_GET['amount'] < 0 || (double)$_GET['amount']>$player['balance'] || (double)$_GET['amount']<$settings['min_withdrawal']) {

The developer really should look into PDO vs mysql_real_escape_string() to better cage SQL queries.

Donations accepted: 1QBvqa2E7AAMb6jpn6UxobaKNf4CvXy1U3

www.worldcoin.ninja

[johny1976]

I was able to isolate and correct the negative withdraw exploit bug last night. This problem impacts all your software.

Update content/ajax/_withdraw.php

Replace line:

if (!is_numeric($_GET['amount']) || (double)$_GET['amount']>$player['balance'] || (double)$_GET['amount']<$settings['min_withdrawal']) {

With Line:

if (!is_numeric($_GET['amount']) || (double)$_GET['amount'] < 0 || (double)$_GET['amount']>$player['balance'] || (double)$_GET['amount']<$settings['min_withdrawal']) {

The developer really should look into PDO vs mysql_real_escape_string() to better cage SQL queries.

Donations accepted: 1QBvqa2E7AAMb6jpn6UxobaKNf4CvXy1U3

www.worldcoin.ninja

The problem is actualy in this: (double)$_GET['amount']<$settings['min_withdrawal'] because variable $settings is not defined (and $settings['min_withdrawal'] would otherwise be protected against negative value so your customization is not needed). This is fixed already and waiting for next script release. However we are talking about another bug which needs to be fixed yet.

Thanks anyway

[randayh]

"so your customization is not needed"

So your advising everyone to wait on the latest update and remain vulnerable to this exploit? For now, I will use  (double)$_GET['amount'] < 0 as a fail-safe.

[johny1976]

"so your customization is not needed"

So your advising everyone to wait on the latest update and remain vulnerable to this exploit? For now, I will use  (double)$_GET['amount'] < 0 as a fail-safe.

Solution is adding this line above mentioned line:

Code:

$settings=mysql_fetch_array(mysql_query("SELECT * FROM `system` WHERE `id`=1 LIMIT 1"));

This will solve 2 problems in one. This exactly will be included in next release. We're still waiting for double withdrawals solution (which CryptoTV posted) so we do recommend stop all your casinos until this bug is solved.

[randayh]

"so your customization is not needed"

So your advising everyone to wait on the latest update and remain vulnerable to this exploit? For now, I will use  (double)$_GET['amount'] < 0 as a fail-safe.

Solution is adding this line above mentioned line:

Code:

$settings=mysql_fetch_array(mysql_query("SELECT * FROM `system` WHERE `id`=1 LIMIT 1"));

This will solve 2 problems in one. This exactly will be included in text release. We're still waiting for double withdrawals solution (which CryptoTV posted) so we do recommend stop all your casinos until this bug is solved.

Got it. That is a better solution.

[johny1976]

Announcement:

Critical bug has been repaired with version 1.4

v1.4 CHANGELOG
- Layout fixed
- Code improvements
- Minor bugs fixed
- Negative withdraw bug fixed
- Double withdrawal bug fixed


Please PM me for update.

[BITDV]

Announcement:

Critical bug has been repaired with version 1.4

v1.4 CHANGELOG
- Layout fixed
- Code improvements
- Minor bugs fixed
- Negative withdraw bug fixed
- Double withdrawal bug fixed


Please PM me for update.

Hi there i sent you a PM yesterday about my interest in this script and the others you have available
has the demo been updated as well as I as i just checked it and some black cards were showing red and some of the red cards showing black

[cloverme]

Has anybody received the 1.4 update yet? I still have my site shutdown from the double-withdrawal issue.

It would be great if the player deposit could be limited too, if anyone has a workaround for that, let me know.

[johny1976]

Has anybody received the 1.4 update yet? I still have my site shutdown from the double-withdrawal issue.

It would be great if the player deposit could be limited too, if anyone has a workaround for that, let me know.

I have just sent it to you, sorry for delay, I have lost the thread.

Do you want us to implement this into next version of CoinJack? That doesn't sound bad.

[randayh]

Has anybody received the 1.4 update yet? I still have my site shutdown from the double-withdrawal issue.

It would be great if the player deposit could be limited too, if anyone has a workaround for that, let me know.

I have just sent it to you, sorry for delay, I have lost the thread.

Do you want us to implement this into next version of CoinJack? That doesn't sound bad.

Has anybody received the 1.4 update yet? I still have my site shutdown from the double-withdrawal issue.

It would be great if the player deposit could be limited too, if anyone has a workaround for that, let me know.

I didn't get the update either...

Here is what I have done to enable manual withdraw review in _withdraw.php as a workaround.

    $amount=(double)$_GET['amount'];
    mysql_query("UPDATE `players` SET `balance`=TRUNCATE(ROUND((`balance`-$amount),9),8) WHERE `id`=$player[id] LIMIT 1");
//    $txid=walletRequest('sendtoaddress',array($_GET['valid_addr'],$amount));
//    mysql_query("INSERT INTO `transactions` (`player_id`,`amount`,`txid`) VALUES ($player[id],(0-$amount),'$txid')");
    mysql_query("INSERT INTO `transactions` (`player_id`,`amount`,`txid`) VALUES ($player[id],(0-$amount),'".prot($_GET['valid_addr'])."')");
    $error='no';
//    $con=$txid;
$con='Withdraws are set to Manual Review: Transation will complete within 24 Hours';
  }
}

[johny1976]

Has anybody received the 1.4 update yet? I still have my site shutdown from the double-withdrawal issue.

It would be great if the player deposit could be limited too, if anyone has a workaround for that, let me know.

I have just sent it to you, sorry for delay, I have lost the thread.

Do you want us to implement this into next version of CoinJack? That doesn't sound bad.

Has anybody received the 1.4 update yet? I still have my site shutdown from the double-withdrawal issue.

It would be great if the player deposit could be limited too, if anyone has a workaround for that, let me know.

I didn't get the update either...

Here is what I have done to enable manual withdraw review in _withdraw.php as a workaround.

    $amount=(double)$_GET['amount'];
    mysql_query("UPDATE `players` SET `balance`=TRUNCATE(ROUND((`balance`-$amount),9),8) WHERE `id`=$player[id] LIMIT 1");
//    $txid=walletRequest('sendtoaddress',array($_GET['valid_addr'],$amount));
//    mysql_query("INSERT INTO `transactions` (`player_id`,`amount`,`txid`) VALUES ($player[id],(0-$amount),'$txid')");
    mysql_query("INSERT INTO `transactions` (`player_id`,`amount`,`txid`) VALUES ($player[id],(0-$amount),'".prot($_GET['valid_addr'])."')");
    $error='no';
//    $con=$txid;
$con='Withdraws are set to Manual Review: Transation will complete within 24 Hours';
  }
}

You've just received it, thanks for reminding me.

To your customization: This is actually not what cloverme was lookig for but thanks anyway, it could be helpful to other people.

[randayh]

I added hot keys to the code. They are nice to have.. might want to add to next release

[cloverme]

No worries, I can live without the max deposit for sure. I thought about it when I read that some player deposited 100 BTC over at primedice and somehow that player ended up losing his balance, I can't imagine trying to help someone find tens of thousands worth of btc floating around.  Just reading that alone gave me seconds thoughts.

Anyway, I think the biggest bug right now seems to be the incorrect color on the deck (spades showing up as red, etc).

Very cool though