Hufflepuff Making 2k BTC On PrimeDice Nov 2014. March 2015 Update: He Cheated

[Aleator]

 Tough, the question stays , how can you check it?

 Yes some of you know how to do it but most of us are like "what the hell does it mean to look up 1k next rolls? How does one even do that"

 Sometimes I am surprised that I am using the same technology everyday with you guys , whenever I want to feel old I come in here and see what people can accomplish with computers and marvel at it feeling like 80 year old grandpa that cant press green button of the simple phone to talk with someone.

 Hufflepuff looking at the seed , knowing whats ahead , checking it , using auto bet calculating his winnings and getting to 2k that way makes me feel like that old man. I wouldn't be able to do what he did even if I knew there was a bug like that.

[RHavar]

 Tough, the question stays , how can you check it?

 Yes some of you know how to do it but most of us are like "what the hell does it mean to look up 1k next rolls? How does one even do that"

That's the easy part, and intrinsic to how provably fair works. Let's say we know the server seed is "moAQKPIMiPI23Eg", you get to pick your own client seed (lets use "my_seed") and from that we can deterministically generate all future rolls. Here are the first 100:

http://dicesites.com/primedice/verifier?ss=moAQKPIMiPI23Eg&cs=my_seed&ln=100&n=0&ssh=A7B8301BBF0E2ADBFE00636443D5570146478D62E1F57437892BD2FB94ED45C8

Now, the only tricky thing is to not look too obvious ;d

[bitcollins85]

PD should have booted this guy immediately on day 1, claiming they felt he was scamming the system. Sure, pay him out, but don't let him keep betting.

[statdude]

Stunna loses a million dollars and just shrugs it off. Rich niggas...man. That is awesome.

Don't worry about Stunna.
Primedice has over 1.1 million btc wagered in total and the number is increasing by 1k+ every day, which translates to 11k positive EV and 10 additional every day.

Amazing the volume.
Why people continue to have eureka moments as they "discover" martingale still cracks me up. My idiot real life friends do it all the time.

[Coef]

PD should have booted this guy immediately on day 1, claiming they felt he was scamming the system. Sure, pay him out, but don't let him keep betting.

How can PD stop him from betting?
Sure Stunna can ban the account or even ban the whole IP range after paying him, but Hufflepuff could simply register a new account within a minute using VPN or proxy or Tor (pretty sure he was using such measure since the very beginning).

The only thing PD could do, is to double check the system to find out the bug and fix it.

[RHavar]

PD should have booted this guy immediately on day 1, claiming they felt he was scamming the system. Sure, pay him out, but don't let him keep betting.

Unfortunately, you can't really stop bets like that. If they're a legitimate whale who happened to get very lucky, you'll just burn a great relation and a lot of chance to make your money back. On the other hand, if it's someone exploiting the game, they'll just be back on another account, on another ip address, hidden amongst the thousands of other players. This will only make it harder to monitor the person and try figure out how they are exploiting you.

[Brewins]

PD should have booted this guy immediately on day 1, claiming they felt he was scamming the system. Sure, pay him out, but don't let him keep betting.

How can PD stop him from betting?
Sure Stunna can ban the account or even ban the whole IP range after paying him, but Hufflepuff could simply register a new account within a minute using VPN or proxy or Tor (pretty sure he was using such measure since the very beginning).

The only thing PD could do, is to double check the system to find out the bug and fix it.

but such luck should be a big flag that the user is using some kind of exploit.

they should delay the withdraw with the excuse that access the cold wallet is hard due to security measures and put all efforts to find the bug

[WhatTheGox]

When the situation was going down huff was moving bitcoin in and then withdrawing some back out, think it was like deposit 100 BTC withdraw when he hit 200 BTC wait 30 mins and start again.  The PD team probably were expecting him to go on a bad run at some point then all of a sudden they are down 700-800 btc and thinking WTF.  At that point perhaps their judgement went and they decided to "gamble" with him as he continued in the hope things would turn around.

[Monopoly]

Is there any inverse process to getting server seed from server hash ? for me , complexity is not important Just i want to know how it's possible ? and how many is the probability for achieving it on 1 million try ?


Another question :
How many bets can we do by a pair seeds ?

[sherbyspark]

Is there any inverse process to getting server seed from server hash ? for me , complexity is not important Just i want to know how it's possible ? and how many is the probability for achieving it on 1 million try ?


Another question :
How many bets can we do by a pair seeds ?

No, there is no way to get the seed from the hash , unless you are the people who developed it. Even then I think not.
You can do unlimited bets with a pair seed as its just the nonce which keeps changing which is used in the calculation of the roll number.

[RHavar]

Is there any inverse process to getting server seed from server hash ? for me , complexity is not important Just i want to know how it's possible ?

If you don't care about computational complexity it's trivial. Just enumerate all possible server seeds

and how many is the probability for achieving it on 1 million try ?

Negligible

Another question :
How many bets can we do by a pair seeds ?

All depends on how the nonce is stored. Assuming conservatively that it's a signed 32 bit integer, that should be about 2.1 billion

[dooglus]

Is there any inverse process to getting server seed from server hash?

I think how it worked was that there was a way to get the same server seed on two accounts. Then you could ask the site to reveal the seed on one account, but not on the other. The revealed seed would be useless on the first account, since the server seed would have been changed, but it would still be active on the 2nd account, and so you could use it to predict all your future rolls.

Note that if you don't care about complexity, you can simply hash every possible server seed until you find one that gives the same hash as the site gave you. But there are more possible server seeds than server seed hashes, and so there are many server seeds which hash to the hash you have been given. Once you found a seed that hashes correct (which would take forever), you would then need to verify that it gave you the correct rolls (it almost certainly wouldn't) and so you would have to spend another bunch of lifetimes searching for another candidate. Which also wouldn't work.

But in theory it works.

[Sweets4Bitcoin]

I have found the addresses for 400btc currently. Still searching....

[Pony789]

PD should have booted this guy immediately on day 1, claiming they felt he was scamming the system. Sure, pay him out, but don't let him keep betting.

How can PD stop him from betting?
Sure Stunna can ban the account or even ban the whole IP range after paying him, but Hufflepuff could simply register a new account within a minute using VPN or proxy or Tor (pretty sure he was using such measure since the very beginning).

The only thing PD could do, is to double check the system to find out the bug and fix it.

but such luck should be a big flag that the user is using some kind of exploit.

they should delay the withdraw with the excuse that access the cold wallet is hard due to security measures and put all efforts to find the bug

Looking at it now, if Primedice delayed the withdrawal for just 2 days, they would have already found the bug and would have saved 2000 btc.
But back then they didn't know if there is a bug or when the bug can be found. They can't delay the withdrawal indefinitely as it would hugely damage PD's reputation.

[arallmuus]

Looking at it now, if Primedice delayed the withdrawal for just 2 days, they would have already found the bug and would have saved 2000 btc.
But back then they didn't know if there is a bug or when the bug can be found. They can't delay the withdrawal indefinitely as it would hugely damage PD's reputation.

PrimeDice has no choice but to pay him as soon as possible because either way he could be just a whale that is very very lucky and at some point paying him 2000 BTC will give alot of credibility to PrimeDice for being able to handle such large amount of withdrawal which also at the same time a good advertisement to the other to come and "bust" the house .

Turns out the found that he was using an exploit which is really unfortunate for them however they still get alot of credibility for being able to handle such large withdrawal though it is really unfortunate

[WhatTheGox]

Im sticking with the theory the PD team went on tilt a little if i remember right it was hufflepuff who called it quits. Makes you wonder what made hufflepuff stop at all?

Also why did he make it so obvious using 1 account to win 2k in btc?

[arallmuus]

Makes you wonder what made hufflepuff stop at all?

He didnt stop in fact he made robinhood to keep on "busting" the house but in the end he was exposed so he stopped his act

Also why did he make it so obvious using 1 account to win 2k in btc?

References :

we reviewed Nappa’s bets and thought they were highly unusual but could find no wrong-doing and cashed him out after a delay and a brief email exchange

September 2014

After getting spooked by his delayed cashout on Nappa, the exploiter waited a few weeks and created a new account named “Hufflepuff”

The bolded references shows that PrimeDice has already been alerted by his action therefore he is making on last huge act all together and show cased it publicly. The reason would be that if you win in front of the crowd, it will draw lot of attention to the site and at the same time PrimeDice will have no other choice but to let him withdraw as soon as possible because holding his withdrawal in front of the crowd would only hurt their reputation ( this guy is truly smart )

[Shinpako09]

Im not an expert so i dont know if hufflepuff really cheat.

But i saw robinhood betting live..I can say he's a cheater..long green streak with no red...even once..plus he's betting 10btc every roll..

[WhatTheGox]

Im not an expert so i dont know if hufflepuff really cheat.

But i saw robinhood betting live..I can say he's a cheater..long green streak with no red...even once..plus he's betting 10btc every roll..

Its pretty much accepted that hufflepuff did cheat and that robinhood is the same person on a multi account unless i am mistaken.

[twicezeroiszero]

Typical Bullshit mostly likely some blatant advertising to show off how much PD has ripped you suckers off by.