Dear players, lately some users claimed theft of their balance on Coinroll. We are aware of that and we’re running full audit and trying to determine if users were compromised or if there was a breach at Coinroll. We are now taking measures to increase security and taking all precautions necessary.
For users with a balance and an account created before 7 Apr 2016, we strongly recommend you to contact firstname.lastname@example.org
and request password change and support will help you to change it.
To proceed with a password change, you need sign with the first address you’ve made a transaction with to your Coinroll deposit address. For anyone without a balance, we recommend you use a new account in the future.
We took some basic security checks, going with OWASP top ten guide and securing Coinroll to prevent future thefts and we will be adding two factor authentication option in the future to Coinroll for withdrawals as well. We will update once we know more about what happened. In any case, we wish security to be at its best both server side and user side. No users funds are compromised other than the few claims of stolen balance. We will keep withdrawals AND deposits disabled until investigation is done to be sure all balances remain safe.
P.S. As a side note, an extra dev was hired. More features should come in the future once this issue is resolved.