Hufflepuff Making 2k BTC On PrimeDice Nov 2014. March 2015 Update: He Cheated

[dznuts85]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

Stunna only said that all accounts used  by huffle have the same seeds(server and player) i dont know how huffle did that or maybe he used some software for it

[1714951738]

1714951738

[1714951738]

1714951738

[1714951738]

1714951738

[1714951738]

1714951738

[DirtyUniverse]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

Stunna only said that all accounts used  by huffle have the same seeds(server and player) i dont know how huffle did that or maybe he used some software for it

Maybe its a exploit or PD Backends vulnerability

[dznuts85]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

Stunna only said that all accounts used  by huffle have the same seeds(server and player) i dont know how huffle did that or maybe he used some software for it

Maybe its a exploit or PD Backends vulnerability

Stunna said that it is an exploit and it is already patched so one could do that again

[Quickseller]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

It was said above that he did.

This would somewhat make sense as there was someone in the services section not long ago that was asking people to create an account on PD and make a bunch of rolls with the same client seed, so he was probably hoping that two of the accounts have a similar server seed so he could run a similar exploit.

Dooplus had also mentioned that it would be possible that anyone who requested a new server seed in the same second would get the same server seed.

edit: it was this guy who was asking people to make accounts with the same client seed, and was doing so via PM on this thread

[dooglus]

Dooplus had also mentioned that it would be possible that anyone who requested a new server seed in the same second would get the same server seed.

I was simply trying to guess how it would be possible for two accounts to have the same server seed. It doesn't seem very likely that the seed is generated solely from the time at which it is generated, but I couldn't think of any other explanation.

[Quickseller]

Dooplus had also mentioned that it would be possible that anyone who requested a new server seed in the same second would get the same server seed.

I was simply trying to guess how it would be possible for two accounts to have the same server seed. It doesn't seem very likely that the seed is generated solely from the time at which it is generated, but I couldn't think of any other explanation.

Well whatever exploit was used, it is unlikely that it was "luck" that one person with two accounts was assigned the same server seed as two people apparently (both Hufflepuff and Robinhood) were able to get the same server seed. If it was possible that "luck" was "used" then I would think that more people would have stumbled across having the same server seed and taken advantage of this.

The only other real explanation that I can think of is that the actual (not hash) server seed was stored on the "live/hot" server and Hufflepuff/Robinhood was able to find some security exploit to determine the actual server seed before it was released to him

[ticoti]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

Stunna only said that all accounts used  by huffle have the same seeds(server and player) i dont know how huffle did that or maybe he used some software for it

Maybe its a exploit or PD Backends vulnerability

Stunna said that it is an exploit and it is already patched so one could do that again

So what happens in the video it is because of an exploit?
I was thinking since I saw it, he was really lucky...
What happened with that bunch of bitcoins?

[waterpile]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

Stunna only said that all accounts used  by huffle have the same seeds(server and player) i dont know how huffle did that or maybe he used some software for it

Maybe its a exploit or PD Backends vulnerability

Stunna said that it is an exploit and it is already patched so one could do that again

So what happens in the video it is because of an exploit?
I was thinking since I saw it, he was really lucky...
What happened with that bunch of bitcoins?

He is probably living in a mansion now and living his life because of PD's great donation

[DirtyUniverse]

How did he get the same server seed on two accounts?

I don't think they can. Server seeds are usually generated randomly by these gambling sites, and each user should have a unique seed. Did Stunna confirm, that 2 accounts had the possibility of having the same server seed ?

Stunna only said that all accounts used  by huffle have the same seeds(server and player) i dont know how huffle did that or maybe he used some software for it

Maybe its a exploit or PD Backends vulnerability

Stunna said that it is an exploit and it is already patched so one could do that again

So what happens in the video it is because of an exploit?
I was thinking since I saw it, he was really lucky...
What happened with that bunch of bitcoins?

He is probably living in a mansion now and living his life because of PD's great donation

He now live like a Dan Bilzerian well dan.

[Quickseller]

Why doesn't stunna publish a list of Hufflepuff's PrimeDice alts so we can see if any of them match any forum handles?

[vennali]

Why doesn't stunna publish a list of Hufflepuff's PrimeDice alts so we can see if any of them match any forum handles?

That would probably not do any good. Even if he was using any of the alts, the chances of his identity being known through any of his accounts is very less. And even if does become known, there would be nothing Stunna would be able to do against him. Specially when there is not legal help that he will get.

[Quickseller]

Why doesn't stunna publish a list of Hufflepuff's PrimeDice alts so we can see if any of them match any forum handles?

That would probably not do any good. Even if he was using any of the alts, the chances of his identity being known through any of his accounts is very less. And even if does become known, there would be nothing Stunna would be able to do against him. Specially when there is not legal help that he will get.

I don't see any downside to releasing the alts. If/when their RL identity is discovered then stunna could sue them to recover damages for the Bitcoin he stole.

[arallmuus]

Why doesn't stunna publish a list of Hufflepuff's PrimeDice alts so we can see if any of them match any forum handles?

That would probably not do any good. Even if he was using any of the alts, the chances of his identity being known through any of his accounts is very less. And even if does become known, there would be nothing Stunna would be able to do against him. Specially when there is not legal help that he will get.

I don't see any downside to releasing the alts. If/when their RL identity is discovered then stunna could sue them to recover damages for the Bitcoin he stole.

I believe Stunna has been researching all of this as well as he will not let this things go away since he knew that hufflepuff cheated. He had promised to release a full details on how hufflepuff did the exploit as well as the other things in article but until now the promise isnt fullfill yet.
Mostly I believe the reason for the delay is because Stunna is investigating this deeper and would not want hufflepuff to know that he is being investigated right now

if you are interested perhaps you can track on this

Here's the address he was cashing out to.

https://blockchain.info/address/14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp

http://www.walletexplorer.com/wallet/4c9d4c23c65af238?from_address=14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp

[vennali]

Why doesn't stunna publish a list of Hufflepuff's PrimeDice alts so we can see if any of them match any forum handles?

That would probably not do any good. Even if he was using any of the alts, the chances of his identity being known through any of his accounts is very less. And even if does become known, there would be nothing Stunna would be able to do against him. Specially when there is not legal help that he will get.

I don't see any downside to releasing the alts. If/when their RL identity is discovered then stunna could sue them to recover damages for the Bitcoin he stole.

Sue him how ? Primedice or any of the gambling sites aren't really licensed, so even if he figures out the identity, he will not be able to take any legal step towards the person, Specially because in this case , that he was taking advantage of a flaw or something on the casino site.

[BlitzandBitz]

Was he able to cash out the btc or was he stopped?

[erwin45hacked]

Was he able to cash out the btc or was he stopped?

He was able to cash out 2000+ btc as hufflepuff but his next withdrawal as robinhood was blocked because Stunna has found out that he is using exploit to win

[vennali]

Was he able to cash out the btc or was he stopped?

He was able to cash out 2000+ btc as hufflepuff but his next withdrawal as robinhood was blocked because Stunna has found out that he is using exploit to win

I don't think Stunna actually found out until Robinhood apparently made it obvious by getting like 140 wins in a row at 50/50 chance , which tipped everyone off. So it might just be him, who purposely did that to show the flaw. But even now, without Stunna's comment on the situation we still don't know if Robinhood was actually Hufflepuff.

[BlitzandBitz]

Was he able to cash out the btc or was he stopped?

He was able to cash out 2000+ btc as hufflepuff but his next withdrawal as robinhood was blocked because Stunna has found out that he is using exploit to win

oh sorry I haven't been in the gambling scene in a while I heard about robinhood but I didn't know that he was the same person.

[arallmuus]

I don't think Stunna actually found out until Robinhood apparently made it obvious by getting like 140 wins in a row at 50/50 chance , which tipped everyone off. So it might just be him, who purposely did that to show the flaw. But even now, without Stunna's comment on the situation we still don't know if Robinhood was actually Hufflepuff.

oh sorry I haven't been in the gambling scene in a while I heard about robinhood but I didn't know that he was the same person.

They are the same person and stunna himself told us about it and Stunna found out robinhood = hufflepuff before the crazy show off winning streak.
The reason robinhood showed off his winning streak was because Stunna had blocked his account from withdrawing the balance, then he decided to show off his winning streak and make it more obviously to the other players

References below may not be a direct link because Stunna himself edited that out

Since this up again.

Robinnhood = Hufflepuff. Both abusing the same exploit I posted about a couple of months ago.

Hufflepuff was paid out over 2.5k BTC over multiple accounts he used with this exploit. Can link the TXID's if need be since I'm not concerned about his privacy obviously. Robinnhood however was not paid out as when we patched the glitch we made it so anyone who did it could not withdraw in an attempt to recoup a small amount of our losses from the exploit. So instead he kept rolling wins in attempt to be funny with no ability to cash out.

Hope this clears things up.

And Primedice's bank roll was barely affected and the exploit is now 100% fixed. The exploit only affected the house & not players. This is another reason why we don't accept investments and advise others to be careful doing so! Unforeseeable stuff like this happens.

Thank you for the fast reply, can you post here in the forum the various transaction id ? I think it would be a valid proof.

EDIT: can you explain the exploit, not it is patched so I think there is not a problem. Maybe better privately.

Here's the address he was cashing out to.

https://blockchain.info/address/14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp

http://www.walletexplorer.com/wallet/4c9d4c23c65af238?from_address=14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp

[ACCTseller]

Was he able to cash out the btc or was he stopped?

He was able to cash out 2000+ btc as hufflepuff but his next withdrawal as robinhood was blocked because Stunna has found out that he is using exploit to win

I don't think Stunna actually found out until Robinhood apparently made it obvious by getting like 140 wins in a row at 50/50 chance , which tipped everyone off. So it might just be him, who purposely did that to show the flaw. But even now, without Stunna's comment on the situation we still don't know if Robinhood was actually Hufflepuff.

Stunna had mentioned above (which have since been edited, but the quotes of his posts remain) that they used the same exploit.

You are probably correct to say that stunna did not know about the exploit until it was made blatantly obvious by robinhood.

It was mentioned above that Hufflepuff had withdrawn to 14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp, and it is known that robinhood was able to withdraw ~20 BTC before his additional withdrawals were stopped, and there do not appear to be any transactions in the amount of 20 BTC to the above address, so it would be reasonable to conclude that it would be possible they are different people.