Topic: ★★★ BitBox - Run your own BITCOIN GAMBLING SITE ★★★ - page 2. (Read 2399 times)

From the auction thread, it definitely seems like they've scammed a few people. But, i'm not sure they're anonymous. The company name they listed on their website is a German one. It appears to be a valid company, registered to (what appears) a residential address in Munich. In one of their posts they did say they have an "office" in Munich, so that part checks out.

However, before any cyber-warrior goes on a witch hunt -- be very careful as it's very possible or even likely they just hijacked someone else company name who has no affiliation with these actual scammers.

How much did you lose?

If anonymous people rent a casino software, there is always the risk of a scam. Can you also buy their software?

They found the solution to all problems: THEY TAKE OUR MONEY AND THEY GONE ANWAY!
My website (www.bitcoingamesclub.com) which was hosted on their servers is offline now.
No answer in the last 10 days:  email, PM, Skype!
They are scammers!

Just my opinion upon checking the demos..

Below are my main concerns.

Provably Fairness:

On Dice game, the Server Hash is not shown anywhere to the players before spinning. Therefor the server can easily manipulate the outcome based on the 'client seed'.

For Crash game, the Server Hash can easily be manipulated by the server since the 'client seed' is already known and static for each round, the server can be coded to produce more 0 rounds. The server seed hash are also not related or 'chained' to each other. You could check how bustabit did theirs https://bitcointalksearch.org/topic/bustabitcom-provably-fair-seeding-event-922898

For Roulette, pretty much similar to Crash game, the server hashes are in no way 'chained', the client seed is generated by the server. So server can easily manipulate each round to produce lesser or more of each color.

There is little to no explanation either in regards to provably fairness of the games.

Exploits:

There are TWO big exploits i've found on both Crash game and Roulette game. And this exploit can clean anyone's bank since i will be able to know what will be the outcome of the current game, therefor i can bet accordingly and win.

Security:

All user info are stored in the user's browser as cookies. Even the password in 'plain text'. Anyone can be tricked to run a script to steal those information.

2FA Secrets are automatically generated for each user and is static. There is no way for the players to change this secret in case they feel like doing so.

Conclusion/Opinion:

The idea of you guys offering ready made casino/gambling package is a cool idea instead of selling them 1 by 1. But considering the things above, the games/package is in no way ready for production yet. This is just my opinion and consider it as a free advice.

Cheers!
-Uni

Well it was also a good game to play and I think those hackers who attack this game was paid by the rival site just to destroy that nice sitr game. It really disappointed everybody who gave full trust to this site and bitbox support should be answering this concerns so that they will regain good reputation which was broke by attackers paid by different gambling software makers. That should be fixed in sooner time so that crash game will be operational again and brings good profit to those affected players.

It has already affected their reputation. I was seriously considering buying their software, as it looks very good and is reasonable priced. This is a very serious problem if there is a exploit in one of the games, and bitbox support isn't answering. Crash is one of my favourite games, and is sad if it's broken.

If this gets resolved, I'm probably going to purchase your games.

Would you mind to give a comment for this accusation against your software? Is it true that you did not reply to their emails, PM etc? You are online today so it would be great if you reply to this issue, otherwise it may affect your project.

What if the user didn't really exploit the site? You've just mentioned that Crash game was just added recently and people don't play it that much (quoted message below). Isn't it possible that you missed to know/checked all of the bugs because you're thinking that only few are playing Crash?


Anyway, I hope you could fixed the problem as soon as possible. Also, if there's no proof that the person exploit the site, you or the owner of bitcoingamesclub should pay him the won amount.

This has never happened. We did not have anyone ever hack or exploit anything. We had a lot of attempts so far, but our rules are if the server is hosted with us (standard or premium license) we would refund all damages to the client. If a client has a basic license (which means he is hosting it on his server) it's not insured.

What we have learned in this business is that there are a lot of bad people who are not interested in gambling at all, they just search for casinos and try to break in, we try to detect that as soon as possible and prevent any attempts. It's normal with any software or online platform. There are always good people and bad people.

what waranties do you offer, what if a buyer lose all or most of his bankroll due to a programming error or site is hacked? what do you do in such scenarios?

I agree, quite worrysome that your system had such a big flaw that allowed the player exploit the system. Weren't all your games properly tested to fix all bugs and remove all possible exploits? I hope you can prove that he cheated to win, because it might tear down the reputation of the casino it happened on, as people could remember it as the "casino that didn't pay out 10btc withdrawal".

Even that this is worrysome, I think your site is a great place to start running a casino from. That being said, this might bring more scam casinos, as the site looks professional and they can reuse the design.

Exactly, that is why there are questions about this platform's security. Like what you have pointed out, there were cheating attempts which could have succeeded if not for manual withdrawals. How about if the guy just went on to withdraw small amounts within the automated withdrawal system? Then for sure the system would not be able to tell that the guy was cheating if he only withdraw small amounts.

How did you know that he is intentionally exploiting the site? I'm curious if do you have a proof or you're just saying that. If your platform can detect cheating attempt why that user who played and won 10btc did not get blocked in the first place?  

We have exactly that.

2 systems. Automatic till a certain level (which can be enabled/disabled) and a manual one.

Yes, we can detect cheating attempts and they are blocked instantly.

Yes it is better to have a manual method of withdrawing, but I think it would be best to still have an automated one for small witdrawals within a specified range of amounts that the owner can set. How about security on this platform, what measures does it implement to prevent cheating? Can an owner determine if the site is being cheated?

Crash game has been added 2 months ago, to be honest, people don't play crash that much, 90% of players play dice. We have manual withdrawals, yes.

for how long are you offering the crash game? 3 years?

hot wallets were very often hacked as far as I know so why do you think yours cant be hacked and be stolen?

I would anyway feel only good with manual withdrawals

I think it needs to test the game CRASH using DEMO, what each user needs to install the app to play

Hi,

Quick explanation. We had a bug report today (first time in 3 years) on crash game. It will be fixed within few hours.

Bitcoins from your bankroll can't be stolen because we use hot & cold wallet + all withdrawals have to be approved. The user which had a 10BTC win started with 0.00001BTC and was intentinaly exploiting the site and of course that client is not obligated to payout that.

Have you fix the bug which make someone win 10btc on bitcoingamesclub as this site is using your platform? Just in case there is another unknown bug which let player to make profit and destroy the site's bankroll, what will you do?
Any guarantees for site's owner to get their money back if they lose big amount because there is a bug on your platform?