dice.ninja - Now with Plinko!

[imp0ster]

Conclusion: ______

1) either AK is a very large investor with that many coins

2) AK has access to cold wallet

3) DMF deposited all the coins to AK to "frame"

4) AK = DMF

any other possibilities?

1. AK was not an investor.

2. Probably AK=DMF or friends

3. No, I showed those transactions to AK and he said he was a big player and those transactions were normal. Also, DMF depositing 970 BTC to PD in order to frame him?? Also AK only had 50 btc on D.N, as he himself confirmed in this thread.

4. Probably

The blockchain together with the IPs make AKs story very very very very very unlikely.

[1714951540]

1714951540

[1714951540]

1714951540

[1714951540]

1714951540

[dooglus]

Sorry for replying to myself, but thinking a bit more about (b) I'm still not sure I get the possible motivation behind this. Why shut down a working site and risk being outed as a scam, when it was probably the only chance to recover the lost coins? Obviously if the site was fractional then a big withdrawal would put it at risk, but with some crafty play against investors (mateo style) this could have been mitigated. Unless it was completely drained, no coins left at all? In which case doing a runner was completely pointless anyway. They should have done a "hacker" story instead.

You're not thinking like a gambler.

The obvious way to recover the lose coins is to gamble and win. The site wasn't going to make much in the way of commission for a long time, since it was at a large negative profit (unless you believe 'divest' was a real player, not a last ditch attempt to attract new investors). "Borrow" a few coins from the bankroll, gamble at PD, recover the losses, repay the bankroll and everything's OK. Except you lose at PD, so need to borrow a few more. Etc. Until the bankroll is empty.

Crafty play against investors? The site was already at -300 BTC profit after AK won a bunch. Any further losses would have looked suspicious.

They did do a "hacker" story. Did you miss it?

[lolled]

Look at the balance graph
https://blockchain.info/charts/balance?address=1NinjabSP8jQAVaA8y9u5fsjNpB5S22xPv

Last month it started appearing that diceninja never had a balance of more than 1500. On 23rd September it was around 1300, after which the owners started giving excuses of coinbase even when the investment value started going up.
The rise later on 4-5th october is consistent with AK winning and so is the fall with his loss which was for a higher value.

[imp0ster]

Sorry for replying to myself, but thinking a bit more about (b) I'm still not sure I get the possible motivation behind this. Why shut down a working site and risk being outed as a scam, when it was probably the only chance to recover the lost coins? Obviously if the site was fractional then a big withdrawal would put it at risk, but with some crafty play against investors (mateo style) this could have been mitigated. Unless it was completely drained, no coins left at all? In which case doing a runner was completely pointless anyway. They should have done a "hacker" story instead.

You're not thinking like a gambler.

The obvious way to recover the lose coins is to gamble and win. The site wasn't going to make much in the way of commission for a long time, since it was at a large negative profit (unless you believe 'divest' was a real player, not a last ditch attempt to attract new investors). "Borrow" a few coins from the bankroll, gamble at PD, recover the losses, repay the bankroll and everything's OK. Except you lose at PD, so need to borrow a few more. Etc. Until the bankroll is empty.

Crafty play against investors? The site was already at -300 BTC profit after AK won a bunch. Any further losses would have looked suspicious.

They did do a "hacker" story. Did you miss it?

NlNico was pretty sure divest was AK on PD...

[theskillzdatklls]

sorry if this has already been tallied up but has there or could be there a count of AK's suspected wins/losses on the gambling sites? would pd and other be willing to share this information? what if it came out to around the size of the investor bankroll minus a few payouts and extra?

[tucenaber]

Ok back to Akcoindiggers explananation of the mathing IP addresses.
DMF and AKCOINDIGGER accounts were registered on moneypot.com by ip address 206.174.121.150, Eric knows DMF account is the real DMF, but AK denies the akcoindigger as being his. They used the same ip address on both just-dice.com and moneypot.com for both accounts. AKcoindigger says he runs a tor exit node and that when he signed up on dice.ninja DMF saw his IP-> used his tor exit node. I consulted with the Tor developers, they say the historical exit node data on torproject.org is believed to be complete. However, the 206.174.121.150 was NEVER used as a Tor exit node, specifically not on July 1st 2014, when DMF logged in using that IP on just-dice.com. AK later changed his story and gave another IP that he was currently using and that he was running tor on in this thread, the atlasproject page shows that the Tor exit node was started a day after the IP accusations...

It makes no sense that DMF would use AKs IP, and even if he did why would AK come up with 2 different explanations that both turned out to be false. He didnt know the Tor project keeps a log of all the active and inactive Tor exit nodes, then he put up a Tor node after he was called out on it not realizing the time it went on would be visible as well.

Thank you. I didn't know that the TOR project kept this info either. AK has been caught in a lie and I highly doubt he'll be back with an explanation...

[MadZ]

sorry if this has already been tallied up but has there or could be there a count of AK's suspected wins/losses on the gambling sites? would pd and other be willing to share this information? what if it came out to around the size of the investor bankroll minus a few payouts and extra?

Honestly, I doubt the exact numbers will prove anything here. First, it is likely AK was not 100% invested in the DN bankroll, he could have gambled with coins that were actually his own, which were not accounted for in the DN bankroll. Also, AK would have had to be incredibly stupid to gamble away every last coin from the DN bankroll. I assume that after a certain point, AK realized the losses he had incurred were too large to recover from, if I had to take a wild guess, I would say this would be when 60-70% of the bankroll had been lost. At this point, he either did not have enough of his own funds to cover the losses and keep DN solvent, or he simply didn't want to take the hit himself, and decided to run. I doubt 100% of the coins were gambled away, although I wouldn't be surprised if they were in the future. I also don't think that it was his intention from the beginning to run, he simply fucked up and felt like it was the only choice. This would explain why some users have received refunds, he didn't want to screw people over, especially those he knew. This is all assuming AK is in fact dmf, and there is a fair amount of evidence to support this at the moment.

[IamNotSure]

So a fucking degen gambler stole our money, lost it, and now a filthy rich dice site owner has no remorse keeping stolen money.

This community is rotten. I think I'm done with BTC.

[imp0ster]

I'm putting more shit out there for others to confirm, I think some focus must be put on this:

Transaction before that on Oct 8 goes from 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD to 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk which goes to 1Ninja afterwards, so 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk is also D.N controlled, which means 188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg is the return address, but why is the same amount of 30 BTC being sent in this transaction with his own 1JvBc address as the return address? Anyway this tells us that 1JvBc owns 188oB and sends together with 1DMz3S in this transaction to BITDICE.ME COLDWALLET DIRECTLY, 1 day before the heist. Smiley

Also on 9 sept, the day of dicebitco.in fraud accusations(<-not sure if relevant), 1CQLpLQmaqi7PHSTFRqhLDPK2Ebw9CW9sg which is dicebitco.in hotwallet, sends 307 btc to 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD <- again 1JvBc on the day of a fraud.

On june 26, 1GsGDnBQ335gNJXNbnWdHS5rkXTuYmoKbP received btc from 14dXN2c4R1neEdBAMpbdQSTdrwfCM91cAv
                                   1ACFvf7UdMEc2vCoNYq7qQUYjZsqPojs5w also received btc in this transaction

On august 25, 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk (D.N) sends 2.99 btc to 17U1LyjKzm2tr8LjpYkFGtvburfyG1rd9q (AK PD deposit address)

On august 25, 1GsGDnBQ335gNJXNbnWdHS5rkXTuYmoKbP sends 13.8 btc to 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk (D.N)


on sept 15, 1ACFvf7UdMEc2vCoNYq7qQUYjZsqPojs5w received 100.001 btc from JvBc, the btc is still there.


https://blockchain.info/nl/tx/44239a0515e7a792c74ddaedb4cac94170cf24b9499b9504befbc024ccf3c278
shows 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD sending money to 19V6c with 188oB as the return address. So either 1JvB owns the N.D hotwallet or the bitdice.me coldwallet, or both..

[MadZ]

So a fucking degen gambler stole our money, lost it, and now a filthy rich dice site owner has no remorse keeping stolen money.

This community is rotten. I think I'm done with BTC.

I think it is unfair and premature to blame Stunna, who I assume you are referencing as the "filthy rich dice site owner". There are a few reasons for this:

1. While there is a large amount of evidence pointing to AK as the thief, it is not 100% certain yet, I think most people involved in this thread would agree to this.
2. AK gambled at more than just Primedice, more than one individual holds the remains of this "stolen money".
3. It is unclear how much of AK's gambling losses come from his own personal btc and from investor funds. It would be unreasonable to ask for all of the coins AK gambled away to be returned by casino owners, since not all of them were investor funds.
4. Had AK been extremely profitable with his gambling, as he was at one point, and had the truth that he had been gambling with investor funds been uncovered, I doubt there would have been calls to return these "stolen winnings" to Stunna or any casino owner. They took on a lot of risk when AK played against them, it is hardly fair to take away their profits, whatever the source.

That being said, if this link between AK and DN was proven beyond a reasonable doubt, I could see some effort being made by casino owners to reimburse DN investors.

[blockage]

This small point might be relevant somehow: Eric paid profits from 25BTC MoneyPot investment by DMF to 12zy2xFBDKmP1HAZxQak8uTqQvQHSoXtSM. Together with a bunch of other coins they were sent in this transaction and ended up in the 1NinjabSP8jQAVaA8y9u5fsjNpB5S22xPv vanity cold wallet address. 1LMVVcBb95xkYJctFMYArHECzSiXNgC58E is one of the sending addresses, that address started making deposits to 17U1LyjKzm2tr8LjpYkFGtvburfyG1rd9q on the 6th of October.(more on that address later)

JoeMattie can you give us historic evidence that you were running a Tor node? You said earlier that you were looking through your logs.  I'm assuming these might also contain your past IP addresses.. Anyone knows more about what Tor logs?

[imp0ster]

Some more:

In thistransaction 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD sends 30 BTC with his own address being the return address

In this transaction 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD sends 30 BTC to the D.N hotwallet, but why such a weird amount of 27,389 while 188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg got 30 BTC? Is D.N the return address, cause in the other transaction the 30BTC is the sent amount, not the change(does not make sense?)

In this transaction
188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg sends btc directly to bitdice.me coldwallet.

both last 2 transactions 1 day before the D.N heist...

[BayAreaCoins]

In this transaction
188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg sends btc directly to bitdice.me coldwallet.

both last 2 transactions 1 day before the D.N heist...

Figures

Only people who send straight to cold wallets for these things are the people who control them. (generally correct?)

User>users deposit address>Cold wallet

[imp0ster]

This small point might be relevant somehow: Eric paid profits from 25BTC MoneyPot investment by DMF to 12zy2xFBDKmP1HAZxQak8uTqQvQHSoXtSM. Together with a bunch of other coins they were sent in this transaction and ended up in the 1NinjabSP8jQAVaA8y9u5fsjNpB5S22xPv vanity cold wallet address. 1LMVVcBb95xkYJctFMYArHECzSiXNgC58E is one of the sending addresses, that address started making deposits to 17U1LyjKzm2tr8LjpYkFGtvburfyG1rd9q on the 6th of October.(more on that address later)

JoeMattie can you give us historic evidence that you were running a Tor node? You said earlier that you were looking through your logs.  I'm assuming these might also contain your past IP addresses.. Anyone knows more about what Tor logs?

Yeah Tor exit nodes are ALL public, you can check current or past status on https://exonerator.torproject.org/

Think about AKs explanations for a moment, 1st he says tor, not knowing tor exit nodes are public, then he comes up with another ip on which tor is running, but ONLY after people mentioned that the other ip was not a tor node. He probably thought you can only check whether the IP is a tor exit node and put one up to prove he was running tor, little did he know every detail about every node is logged on torproject.org. THEN he comes up with the other germany brother proxy bullshit...

[tucenaber]

I'm putting more shit out there for others to confirm, I think some focus must be put on this:

Transaction before that on Oct 8 goes from 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD to 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk which goes to 1Ninja afterwards, so 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk is also D.N controlled, which means 188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg is the return address, but why is the same amount of 30 BTC being sent in this transaction with his own 1JvBc address as the return address? Anyway this tells us that 1JvBc owns 188oB and sends together with 1DMz3S in this transaction to BITDICE.ME COLDWALLET DIRECTLY, 1 day before the heist. Smiley

Also on 9 sept, the day of dicebitco.in fraud accusations(<-not sure if relevant), 1CQLpLQmaqi7PHSTFRqhLDPK2Ebw9CW9sg which is dicebitco.in hotwallet, sends 307 btc to 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD <- again 1JvBc on the day of a fraud.

On june 26, 1GsGDnBQ335gNJXNbnWdHS5rkXTuYmoKbP received btc from 14dXN2c4R1neEdBAMpbdQSTdrwfCM91cAv
                                   1ACFvf7UdMEc2vCoNYq7qQUYjZsqPojs5w also received btc in this transaction

On august 25, 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk (D.N) sends 2.99 btc to 17U1LyjKzm2tr8LjpYkFGtvburfyG1rd9q (AK PD deposit address)

On august 25, 1GsGDnBQ335gNJXNbnWdHS5rkXTuYmoKbP sends 13.8 btc to 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk (D.N)


on sept 15, 1ACFvf7UdMEc2vCoNYq7qQUYjZsqPojs5w received 100.001 btc from JvBc, the btc is still there.


https://blockchain.info/nl/tx/44239a0515e7a792c74ddaedb4cac94170cf24b9499b9504befbc024ccf3c278
shows 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD sending money to 19V6c with 188oB as the return address. So either 1JvB owns the N.D hotwallet or the bitdice.me coldwallet, or both..

I shortened it to

diceditco.in -> 1JvBc
1GsGD -> 14dXN & 1ACFv
dice.ninja -> AK PD
1GsGD -> dice.ninja
1JvBc -> 1ACFv
1JvBc -> 19V6c & 188oB


What exactly are you saying here?

Please don't just throw out addresses and transactions like that. Usually they don't prove anything. Give us the reasons for why you think this proves something.

[MICRO]

There is one more possibility .

Maybe dmf cleaned out cold wallet by sending it to his account on pd and make it look like AK lost it all on pd . Timing was perfect.

While AK was losing his own money dmf sends money to pd deposit addy from cold wallet , and makes it look like its AK who done that , and also gets free mixing service.

We again need to hear AK side of the story.



As for Stunna and pd, well my point of view is that when u come and deposit , pd shouldn't care who u are, what u do , where did u get that money and how , when u come to gambling site and deposit money its considered urs money , when u win money there , that is urs money, when u lose money there , that is casino money now.
But Stunna might have other opinion on that and im not even sure he is aware of this situation yet. So we will see if he will take some actions when he sees this thread.  

[blockage]

Ok back to Akcoindiggers explananation of the mathing IP addresses.
DMF and AKCOINDIGGER accounts were registered on moneypot.com by ip address 206.174.121.150, Eric knows DMF account is the real DMF, but AK denies the akcoindigger as being his. They used the same ip address on both just-dice.com and moneypot.com for both accounts. AKcoindigger says he runs a tor exit node and that when he signed up on dice.ninja DMF saw his IP-> used his tor exit node. I consulted with the Tor developers, they say the historical exit node data on torproject.org is believed to be complete. However, the 206.174.121.150 was NEVER used as a Tor exit node, specifically not on July 1st 2014, when DMF logged in using that IP on just-dice.com. AK later changed his story and gave another IP that he was currently using and that he was running tor on in this thread, the atlasproject page shows that the Tor exit node was started a day after the IP accusations...

Was it said in this thread that the IP addresses were the same on JD and MP? I can only find that dooglus said that AK and dmf used the same IP address, but he didn't explicitly mention the IP nor did he say it was the same as the one on MP. Did i miss that information?

A user called "dmf" (userid 257954) visited doge-dice from an IP address that AK also used. He connected 5 times in total, all from the same IP address, at these times UTC:

2014-06-24 14:46:23
2014-06-24 15:04:07
2014-06-24 15:13:13
2014-06-24 16:01:32
2014-07-01 15:50:57

Sorting AK's and dmf's connections together, we see these connection times:

2014-06-24 12:28:04 AK
2014-06-24 14:43:22 AK

2014-06-24 14:46:23 dmf
2014-06-24 15:04:07 dmf
2014-06-24 15:13:13 dmf
2014-06-24 16:01:32 dmf

2014-06-24 16:16:43 AK
2014-06-24 16:17:45 AK
2014-06-24 18:33:31 AK
2014-06-24 20:32:58 AK

They were both active on the same IP address within minutes of each other.

Can you give us more info about the IP addresses. Either revealing them explicitly or checking if they have been Tor exit nodes at the dates in question?

[IamNotSure]

When I suddenly got it :

Unfortunately, I never got those messages, and to top it off my skype account was apparently hacked some time in the last few days, and I've just regained control of it.

Blaming a hacker... fucking degen

[oppahdoggystyle]

I made deposits (to invest) at dice.ninja for 41.77368432 bitcoins and my deposit address was 1CzQ93NSBXG3KtAvQyFBAeAcjyryo6Ebjg
I used my address 1HiXJDHXUozQGACWywTm99Yn8nhRGA3prc to make the deposits.

for the 30.39999 bitcoins deposit: https://blockchain.info/tx/2d730dd9ed92d02f4a8abbafadad49280ef74a02667a5d45610db6700bbe3861
for the 5 btc deposit: https://blockchain.info/tx/702d3af9f183b90982e010a2ae54868b06548cec2482dfdac81fc3daba5d4c2b
for the 6.37369432 btc deposit investment: https://blockchain.info/tx/c6dd114504554879a8b1a4c72ed9b40aa5f5707acd3dbe7a862b92d0b7eaa07c

Return my money. We, the investors, will not give up easily.

While I am still devastated from diceninja's mishandling of my 41 bitcoins, after reading all of your unbelievably thorough research and investigation into Diceninja and AK's involvement, I thank you all for providing some clarity in this mess. I am not very skilled at all, but I will do my best to contribute to our community's cause.

[ltcnim]

1NinjabSP8jQAVaA8y9u5fsjNpB5S22xPv was the dice.ninja cold wallet, every transaction from 6 oct until it went bust ends up in the 17U1LyjKzm2tr8LjpYkFGtvburfyG1rd9q AK PD deposit address, the return addresses send the remaining funds to AK PD address and so on. Those are incidentally also the last transactions from the 1Ninja address.

I just checked out the blockchain, looking at the transactions that emptied the 1ninja cold wallet. I see a total 970 BTC being sent to AK's PD deposit address from dice.ninja's cold wallet in just 2 nights, as follows:

https://blockchain.info/tx/e2ace1184711b0f992d5f78091dd04af2e4700888dde044abd3cdbc86fadb652
30      2014-10-06 23:58:43
30      2014-10-07 00:45:52
30      2014-10-07 01:01:24
10      2014-10-07 01:37:29

https://blockchain.info/tx/340253a3532748cda3aa81d50b91213d0356b6792605abb8809fe40e0e096eab
25      2014-10-07 02:29:37
25      2014-10-07 02:35:00
25      2014-10-07 02:35:09
25      2014-10-07 02:44:26

https://blockchain.info/tx/e60378a3d5da56552dfef1d7244317d57850e0fe58f2e7f37104d61f29456ddd
25      2014-10-07 03:00:19
25      2014-10-07 03:03:57
25      2014-10-07 03:06:35
25      2014-10-07 03:41:59

https://blockchain.info/tx/c87f63d2c2d587d9186d39468e8becaaba1d8d562421ea674f222ca59f60449f
25      2014-10-07 03:54:27
35      2014-10-07 04:07:53
25      2014-10-07 04:21:08
15      2014-10-07 04:57:17

https://blockchain.info/tx/a6b8b0309eb926489e8501c6debab1b0f79c26ec1745b15ff5da9d8589d7768d
50      2014-10-07 04:59:56
50      2014-10-07 05:11:02

https://blockchain.info/tx/a662c8e47ef360928e384fe7bf8b64799aa5c7371c0823a7a257a0844d014861
75      2014-10-07 06:21:00
75      2014-10-07 06:33:22
20      2014-10-07 07:14:23

https://blockchain.info/tx/e4fc8caf4a8c2bfac57d30baf1fd611fc160d0e2ed88faa4b25f032c5e874132
20      2014-10-08 03:39:06
20      2014-10-08 03:39:10
25      2014-10-08 04:00:39
10      2014-10-08 04:13:54
20      2014-10-08 04:16:14

https://blockchain.info/tx/7b15e2c424d7c7df63875f529705429709f2beb3a260b1d0ae8cd3940245028a
50      2014-10-08 04:47:47
20      2014-10-08 05:03:19
100     2014-10-08 05:07:55
20      2014-10-08 05:45:19
15      2014-10-08 07:17:31

uhm...i'm not sure if I get this. 970btc were sent from the diceninja coldwallet to AK's primedice account? as far as I can remember he was never up that much on diceninja. he was up around 270BTC in the end, after losing around 500BTC (he was also down a few BTC with other accounts), so these numbers don't seem to match up, unless i miss something important...