Bitcoin Forum
December 03, 2016, 09:56:22 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: [Security Warning] bitcoinslots.net is a scam  (Read 1659 times)
a nice guy
Newbie
*
Offline Offline

Activity: 27


View Profile
May 25, 2012, 08:27:42 PM
 #1

Hello,

I found the website "bitcoinslots.net" on mem's BITCOIN GAMBLING LIST in the pending section of his post.
I thought I give it a shot.

After a deposit of 1BTC, I was able to convert it to credits and play a little bit.
As some of you might know, I scan websites for vulnerabilities and report them back
to the site's owners.

I instantly discovered that there is something weird going on.
After a bit of poking, I was able to set my balance to an arbitrary amount and convert the
credits back to BTC.
It wasn't much, it was just to check the site.
If I would have been able to withdraw that, I would have, of course, sent them back.

But to my surprise, my account was instantly blocked by the system.
I made another deposit of 0.1 and set the amount of credits a little bit higher just to analyze
how the game itself works.
And what I discovered was just disgusting.

Once you open the game, your credits are displayed.
When you bet X and spin the wheel, your new balance will always be Credits - X.
In fact, there is no result to wait for while the wheels are spinning,
it all happens as soon as you hit "spin".


I tried to contact him on April 15th through the contact-form on his site and on March 23th through this forum,
but haven't heard of him.


Please be advised, do not deposit anything!


Some details about tentob:

bitcoinslots.net whois:
Administrative Contact:
vcxzvcxzvcxz, cxvcxvzx vcxzvzx@fdsf.ds
ulica nomer
Grad, Oblast 1234
Bulgaria
+35432424324

activity on this forum:
just one post: https://bitcointalk.org/index.php?action=pm;sa=send;u=56870



kind regards,
a nice guy


If someone wants to donate for this thread, please use
14iuwFpzYGN2Ap4zimxZQHfEGsRwFc1gNs

1PqBH6NWFBhbVF7Srw5ZYGtmLcya1aaw9g
security audits (http://bitcointalk.org/index.php?topic=75684)
pgp: 0x77DA3A9A @ pgp.mit.edu (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x83F5BD9E77DA3A9A)
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480802182
Hero Member
*
Offline Offline

Posts: 1480802182

View Profile Personal Message (Offline)

Ignore
1480802182
Reply with quote  #2

1480802182
Report to moderator
DeathAndTaxes
Donator
Legendary
*
Offline Offline

Activity: 1218


Gerald Davis


View Profile
May 25, 2012, 09:01:36 PM
 #2

Quote
Once you open the game, your credits are displayed.
When you bet X and spin the wheel, your new balance will always be Credits - X.
In fact, there is no result to wait for while the wheels are spinning,
it all happens as soon as you hit "spin".

This isn't damning at all.  You do know even in real world slot machines the wheels are just pointless fun.  The rng determines the win/loss and payout before the wheels even start spinning.  The wheels are simply a song and dance to make the game more entertaining.

Of course I wouldn't play on any site where you can't verify the game is legit using cryptography.
I also would never make any site where players can't verify the game is legit using cryptography.
a nice guy
Newbie
*
Offline Offline

Activity: 27


View Profile
May 25, 2012, 09:12:30 PM
 #3

Oh, and sorry, forgot to add one thing.
On the front page there is a list of "latest winners".

They are faked, he had a test.php where all the btc movements were logged.
Sadly I have no backup of the log and the file was removed.
But there were no payments that could have possibly achieved this.

kind regards,
a nice guy

1PqBH6NWFBhbVF7Srw5ZYGtmLcya1aaw9g
security audits (http://bitcointalk.org/index.php?topic=75684)
pgp: 0x77DA3A9A @ pgp.mit.edu (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x83F5BD9E77DA3A9A)
FreeMoney
Legendary
*
Offline Offline

Activity: 1246


Strength in numbers


View Profile WWW
May 25, 2012, 09:54:09 PM
 #4

I don't know anything about this site.

Balance ought drop immediately. You are paying to play, and if you are lucky you might win money and it will be added to your account afterwards.

Play Bitcoin Poker at sealswithclubs.eu. We're active and open to everyone.
mem
Hero Member
*****
Offline Offline

Activity: 644


Herp Derp PTY LTD


View Profile
May 26, 2012, 02:39:26 AM
 #5

I did play this site myself several times to verify (cash in and out after a win and a loss).

Thanks for the heads up, I'll just make a note against the site for now while we investigate further.

actually better than that, the admin ( tentob ) is a forum member I have pm'ed him and linked him to this thread.

if no response (and there is definitely issues) it will be shifted to the unattended section until resolved.

mem
Hero Member
*****
Offline Offline

Activity: 644


Herp Derp PTY LTD


View Profile
May 29, 2012, 02:13:26 AM
 #6

Responding for Tenebob.

Site admin is responding and issues have been raised against the user making the complaint.


Quote
Hi mem,
I just noticed that some issues are raised against bitcoinslots.net.
The user that claims it's a scam tried to cheat me and I cought him just seconds before he to  withdraw the stollen bitcoins.

What does he do is when start to play he goes offline so the losses are not counted at all, and if he wins goes back online and continue with more credits if fails he starts again with the untouched credit, goes offline again and so on.

First he tried with small sum, I didn't notice that at first - 0.2 BTC And he withdrew the sum I thought that he got some luck, nothing to worry about. But then he tried with more bitcoins and I cought him.

So the scammer is him, not me. When I found outwhat was happening I stoped the whole website to find a way how to fix that and finaly I implemented a methods to block players who are trying to cheat.

I will not disclouse what they are  but every player that plays in a way it should be played will not have problems with that.

The whole time this riddiculas event was happening I was as well bombarded with mysql injections and dos attacks.

That helped me to improve  the security of course, but this doesn't make bitcoinslots scam I believe


How dare he to talk when he was the real cheater. I'm sure that if he successeded he was never going to give the sotlen back

a nice guy
Newbie
*
Offline Offline

Activity: 27


View Profile
May 29, 2012, 05:18:29 AM
 #7

Responding for Tenebob.

Site admin is responding and issues have been raised against the user making the complaint.


Quote
Hi mem,
I just noticed that some issues are raised against bitcoinslots.net.
The user that claims it's a scam tried to cheat me and I cought him just seconds before he to  withdraw the stollen bitcoins.

What does he do is when start to play he goes offline so the losses are not counted at all, and if he wins goes back online and continue with more credits if fails he starts again with the untouched credit, goes offline again and so on.

First he tried with small sum, I didn't notice that at first - 0.2 BTC And he withdrew the sum I thought that he got some luck, nothing to worry about. But then he tried with more bitcoins and I cought him.

So the scammer is him, not me. When I found outwhat was happening I stoped the whole website to find a way how to fix that and finaly I implemented a methods to block players who are trying to cheat.

I will not disclouse what they are  but every player that plays in a way it should be played will not have problems with that.

The whole time this riddiculas event was happening I was as well bombarded with mysql injections and dos attacks.

That helped me to improve  the security of course, but this doesn't make bitcoinslots scam I believe


How dare he to talk when he was the real cheater. I'm sure that if he successeded he was never going to give the sotlen back

Hello,


I'm not the user described above.
And again, If I would have been able withdraw anything through a bug/exploit, I would have sent the coins back.
There are some site owners, who could confirm that I would never do such a thing.
Still, I would be very cautious about the site.

I think it would be the best, if tentob himself would respond to this thread and return my 1.1BTC.
He/You should really contact me.

kind regards,
a nice guy

1PqBH6NWFBhbVF7Srw5ZYGtmLcya1aaw9g
security audits (http://bitcointalk.org/index.php?topic=75684)
pgp: 0x77DA3A9A @ pgp.mit.edu (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x83F5BD9E77DA3A9A)
mem
Hero Member
*****
Offline Offline

Activity: 644


Herp Derp PTY LTD


View Profile
June 01, 2012, 01:52:01 AM
 #8

Id like to see this resolved, keep us posted please.

a nice guy
Newbie
*
Offline Offline

Activity: 27


View Profile
June 08, 2012, 06:52:08 PM
 #9

Hello,

I'm still waiting for an answer from tentob.
He hasn't replied to my mail and pm.

As far as I'm concerned, he scammed at least me of 1.1BTC.


kind regards,
a nice guy

1PqBH6NWFBhbVF7Srw5ZYGtmLcya1aaw9g
security audits (http://bitcointalk.org/index.php?topic=75684)
pgp: 0x77DA3A9A @ pgp.mit.edu (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x83F5BD9E77DA3A9A)
a nice guy
Newbie
*
Offline Offline

Activity: 27


View Profile
September 19, 2012, 01:03:51 PM
 #10

Hello,

bitcoinslots.net is now down for several days, you get redirected to some porn-site.
I haven't heard of tentob since my report and his postcount remains at 1.

As it seems, all coins are lost.

kind regards,
a nice guy

1PqBH6NWFBhbVF7Srw5ZYGtmLcya1aaw9g
security audits (http://bitcointalk.org/index.php?topic=75684)
pgp: 0x77DA3A9A @ pgp.mit.edu (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x83F5BD9E77DA3A9A)
mem
Hero Member
*****
Offline Offline

Activity: 644


Herp Derp PTY LTD


View Profile
September 19, 2012, 02:43:24 PM
 #11

well, that is rather.... unpleasant.

Striking out sites entry, will shift it to scams shortly.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!