Pages:
Author

Topic: crypto-games.net, 30% house edge, bugs and vulnerabilities, screw the investors! (Read 13017 times)

legendary
Activity: 2940
Merit: 1333

Quoting just for references in case few hours later someone find a rounding issue again
Nice idea! Because I did!
Set bet amount to 0.00000001 (one satoshi) and payout multiplier to 1.5
You can't divide a satoshi so 1.5 gets rounded to 2.
The house edge is 32.24%. (Roll over 33.86, or Roll under 66.13 with 2x payout)

To crypto-games.net admins: Will I get a price for this?  Kiss
If i play for 1 satoshi and win, i get one, not two.

So i dont know what u mean that i will get two, multiplier is set to 1.5

ClamCoin
No. You don't get one, your profit is one.
You get two satoshies on win, but your bet is one, so the rest is your profit(one satoshi).

You get 1.5 on a win, 0.5 of which is profit. If you win two in a row, one time your balance will go up by 1 satoshi, the other time it will stay still. It's like you really win 0.5 profit, but the displayed balance is rounded to 8 decimal places.
legendary
Activity: 2940
Merit: 1333
Yeah sure. Investors are safe. What you think -> I don't care.

You emailed your investors before you knew any details of the vulnerability telling them that they were safe.

You were wrong.

Once you knew about the vulnerability you denied it because you couldn't reproduce it in your badly coded simulation.

You were wrong again.

So what makes you think that you're qualified to say "Investors are safe" now? And why should they believe you when you have shown yourself to be generally clueless?
full member
Activity: 168
Merit: 100
http://pachinko.games-bit.com/
I just realized that the discussion is shifted here so I post what I posted there.

But seriously if you guys want to keep running your casino longer accept your mistakes, apologize and fix the bugs and move on. 1.5 BTC is fair enough I think. (you means them here)

For substrata and doogulus if they are not willing to pay 1.5btc maybe lower it a bit as it will be ethical to report a bug to the site owner. People usually do it without expecting much. And if owner wants they acknowledge their efforts in various ways suitable to them like giving them bounty(FB pays $1000 for bugs and even 15k for serious ones. while yahoo gifts a pen LOL). But its your wish totally what cost you ask as you could have exploited it without even informing them.
legendary
Activity: 3556
Merit: 9709
#1 VIP Crypto Casino
Oh dear, just popped back here & this has progressed a lot  Cry . I have to admit there are a lot of good people here who do a great service to their fellow posters by policing this place & calling out the bad guys. Massive respect & a big thank you - you guys know who you are.

30% house edge is insane, if that's 100% proven how can that site be allowed to be advertised anywhere on this forum? I'm sick of reading about people getting scammed etc. We all work hard & shouldn't have to worry about getting scammed when we simply want to gamble 'fairly'.
legendary
Activity: 1288
Merit: 1043
:^)
id like to point out the source of this disagreement:
Hello, this is regarding the thread in the gambling section that has become a rather big topic of discussion over the past day: https://bitcointalk.org/index.php?topic=1106133.100
As I have claimed in the thread, I have found a way to bet on your site that gives an edge advantage to the players. In addition, there is a way to exploit the client side to manipulate some data that should not be manipulable. These claims have been tested and confirmed by user dooglus to be true.
I am asking for 1.5 BTC as a bounty for finding these brutally exploitable bugs on your site. dooglus is included in this group pm to verify these claims. If you are willing to escrow the 1.5 BTC for the bounty we can discuss this bugs at the soonest possible time so that they can be fixed.

Please use "reply to all" when replying to this message so that all three users may be included in this PM conversation.

i told you there were two bugs from the start. i dont know why youre acting so surprised. the fact that you dont even take the time to double check before posting this is pretty pathetic. learn to read.
This is all you have to reply? Pathetic it is.

I'd just like to quickly state that all my arguments are completely factual and referenced by proof.

I also have no need to 'boost posts' and am not enrolled in any sig campaign of any kind.
Sure, you are not. lol.
i clearly stated in the initial message that there were two bugs, the +EV bug (rounding error) and the bug that allowed for bets exceeding the bet parameters (6666x bets). DCM didnt learn how to read, and behold comedy gold:
From when there are two bugs?
The list is the same: https://bitcointalksearch.org/topic/escrow-list-108716
this display of stunning intelligence is cringey, and its also mind blowing how people this incompetent managed to run a site for a year in the first place.

id also like to ask people to stop bumping their thread, id rather not have people see it and go play on that site and end up getting scammed.
sr. member
Activity: 448
Merit: 250
I would say to stop posting on their thread as we are making them the favor of bumping their thread on top on this boards which means that more people could actually be "scammed" by his cheap site. Hope their investor / players know about this thread and get out of the site immediately

With this entire issue arrising, the site is getting 4+ pages of it . Thats pretty much 15 % increase of activity for their site

good point, ill stop posting in their "official" thread, even though its so fun to see this guy as mad as he is. personally id like to see a lot of red painted onto both of their trust pages to dissuade people from playing on their site ever again. also, joter85 mentioned that bets decreased by 90% on their site as a result of the incident; I dont expect him to be telling the truth, but if that's true its a start.
I have set my personal text and banner to : cryptogamers.net are scammers!
legendary
Activity: 1288
Merit: 1043
:^)
I would say to stop posting on their thread as we are making them the favor of bumping their thread on top on this boards which means that more people could actually be "scammed" by his cheap site. Hope their investor / players know about this thread and get out of the site immediately

With this entire issue arrising, the site is getting 4+ pages of it . Thats pretty much 15 % increase of activity for their site

good point, ill stop posting in their "official" thread, even though its so fun to see this guy as mad as he is. personally id like to see a lot of red painted onto both of their trust pages to dissuade people from playing on their site ever again. also, joter85 mentioned that bets decreased by 90% on their site as a result of the incident; I dont expect him to be telling the truth, but if that's true its a start.
legendary
Activity: 2562
Merit: 1414
Im no expert on this but could this be caused by cookies as well apart from having the same seed from before and after the fixed? ( had some experiences with cookies messing up multiplier in a site ) and you didnt mention that did you clear cookies before starting the new account though. That could be a another reason why the bet is glitched

Yes I cleared cookies to start the new account.  After the cookies were cleared, play seemed to resume back to normal.

The issue could probably be caused by cookies because if the site force a soft update without forcing a refresh or play in a mirror site that thing could happen as the cookies might affect the gameplay . If this issue which is truly caused by cookies is happening to you then there will be another person that might have the same issue as well there unless he make an announcement to clear off cookies . Sadly people just gamble there blindly without knowing the truth

P.S : I am pretty much not too sure about this cookies issue, Perhaps anyone with some sheer experiences could shed some light , Dooglus perhaps?

I was asking if there was really a vulnarability, they said i dont want to talk here about it, so i kept asking and they would mute me if i didnt stop talking about the quality of the script and so on...

A site that could not take a critism is bound to fail. Lack of attitude , blind to see the undeniable fact and heavy censorship about this issue mean that he actually know that he is wrong about this and he is too proud of himself which is why he keeps on twisting on his words

im not an expert, but i think thats called censorship. Roll Eyes

Yes it is



I would say to stop posting on their thread as we are making them the favor of bumping their thread on top on this boards which means that more people could actually be "scammed" by his cheap site. Hope their investor / players know about this thread and get out of the site immediately

With this entire issue arrising, the site is getting 4+ pages of it . Thats pretty much 15 % increase of activity for their site
legendary
Activity: 1288
Merit: 1043
:^)
I was asking if there was really a vulnarability, they said i dont want to talk here about it, so i kept asking and they would mute me if i didnt stop talking about the quality of the script and so on...


ClamCoin

im not an expert, but i think thats called censorship. Roll Eyes if the developer cant take criticism i dont expect this site to ever make progress.
legendary
Activity: 1330
Merit: 1000
I did start 'winning' on the original account after the claim was made, but my best honest guess is that because the admin did not reboot the site or force a refresh, that somehow my bets were glitched with the 'hotfix' that was applied. 

Im no expert on this but could this be caused by cookies as well apart from having the same seed from before and after the fixed? ( had some experiences with cookies messing up multiplier in a site ) and you didnt mention that did you clear cookies before starting the new account though. That could be a another reason why the bet is glitched

The site has terrible management and is poorly coded. 

The management disrespect people and threaten them when they go and give them an advice on what they should do. Despite all the fact presented here, people are still rolling without any concern on what the risk is. His proud of his code is making him blind for all the facts here and he isnt taking any concern with all of this thing
'

Yes I cleared cookies to start the new account.  After the cookies were cleared, play seemed to resume back to normal.
sr. member
Activity: 448
Merit: 250
I was asking if there was really a vulnarability, they said i dont want to talk here about it, so i kept asking and they would mute me if i didnt stop talking about the quality of the script and so on...


ClamCoin
legendary
Activity: 2562
Merit: 1414
I did start 'winning' on the original account after the claim was made, but my best honest guess is that because the admin did not reboot the site or force a refresh, that somehow my bets were glitched with the 'hotfix' that was applied. 

Im no expert on this but could this be caused by cookies as well apart from having the same seed from before and after the fixed? ( had some experiences with cookies messing up multiplier in a site ) and you didnt mention that did you clear cookies before starting the new account though. That could be a another reason why the bet is glitched

The site has terrible management and is poorly coded. 

The management disrespect people and threaten them when they go and give them an advice on what they should do. Despite all the fact presented here, people are still rolling without any concern on what the risk is. His proud of his code is making him blind for all the facts here and he isnt taking any concern with all of this thing
legendary
Activity: 1330
Merit: 1000
Quote
I kept running into problems with video conversion and my wife wanted to take the day off for the family.

it happens, dont sweat it.

Quote
I then challenged the moderator and another user skeptical of my claims to bet 2BTC that I could prove to them that over the next 5,000 (putting the sum total of rolls at over 23,000 with zero wins) rolls at 200x (>99.494), I would end up with exactly 0 wins.  They were hesitant to accept this bet even though I basically begged them to accept and offered to have any trustworthy escrow hold the funds and release it to them if any win was shown on the site (pretty simple and straightforward way of confirming the winner of the bet) and that I was basically betting even money that I would win exactly ZERO times over 5,000 rolls instead of the many permutations of wins with a standard deviation near 75 wins over this period.  This is liken to betting someone at 1:1 that a roulette wheel will produce 20 black numbers in a row instead of any other result.  They both declined.
i dont see why they wouldnt accept your challenge if they were so confident in their site.

Quote
I then created a new account where I predicted that I would win within 200-600 rolls in which case I did.  I logged back into my original account with a new client/server seed and then started to win/lose at a normal rate.
did you start winning again on the original account after you made the claim that there was something suspicious going on in the thread? I think that's a rather big question that needs to be addressed. for all we know the admin could have toggled fair rolls back on or something after seeing that you noticed this suspicious variance.

Quote
I did check a few of my bets (I was unable to check the earlier bets because the site does not allow access to them and I wasn't pausing the betting to check with 3 bets per second) and they did check out to be provably fair.  By a few, I mean 10 out of 33,000 total.

big red alarm, not being given access to all your previous bets to verify their fairness might as well mean its not provably fair at all.



I did start 'winning' on the original account after the claim was made, but my best honest guess is that because the admin did not reboot the site or force a refresh, that somehow my bets were glitched with the 'hotfix' that was applied. 

I don't really expect that they were manipulating or rigging my account in any way, but I rationally think that my account had some unintentional problems connected with it and that all members involved with running in the site simply did not care to address it or find the root cause of it. 

The site has terrible management and is poorly coded.  Unintentional bugs and glitches like the one I believe happened to me and the handling of it is a glaring example of this.   
legendary
Activity: 1288
Merit: 1043
:^)
Quote
I kept running into problems with video conversion and my wife wanted to take the day off for the family.

it happens, dont sweat it.

Quote
I then challenged the moderator and another user skeptical of my claims to bet 2BTC that I could prove to them that over the next 5,000 (putting the sum total of rolls at over 23,000 with zero wins) rolls at 200x (>99.494), I would end up with exactly 0 wins.  They were hesitant to accept this bet even though I basically begged them to accept and offered to have any trustworthy escrow hold the funds and release it to them if any win was shown on the site (pretty simple and straightforward way of confirming the winner of the bet) and that I was basically betting even money that I would win exactly ZERO times over 5,000 rolls instead of the many permutations of wins with a standard deviation near 75 wins over this period.  This is liken to betting someone at 1:1 that a roulette wheel will produce 20 black numbers in a row instead of any other result.  They both declined.
i dont see why they wouldnt accept your challenge if they were so confident in their site.

Quote
I then created a new account where I predicted that I would win within 200-600 rolls in which case I did.  I logged back into my original account with a new client/server seed and then started to win/lose at a normal rate.
did you start winning again on the original account after you made the claim that there was something suspicious going on in the thread? I think that's a rather big question that needs to be addressed. for all we know the admin could have toggled fair rolls back on or something after seeing that you noticed this suspicious variance.

Quote
I did check a few of my bets (I was unable to check the earlier bets because the site does not allow access to them and I wasn't pausing the betting to check with 3 bets per second) and they did check out to be provably fair.  By a few, I mean 10 out of 33,000 total.

big red alarm, not being given access to all your previous bets to verify their fairness might as well mean its not provably fair at all.

legendary
Activity: 1330
Merit: 1000
Added note that I forgot to include:

You can see that in the second video others were trying to help me out at the same time and reproduce the same results.  Regardless of a few of them hitting, I still remained unfazed (evidence in body language and speech) on my complete confidence that I would not achieve any win over a much larger sample than they were using.
legendary
Activity: 1330
Merit: 1000
Sorry for the delay.  I kept running into problems with video conversion and my wife wanted to take the day off for the family.

Anyways... Here's my story.

- On July 3 around 5PM Eastern time, I had deposited .2BTC to test out the site.

- I started by betting .0002BTC at 200x (the imposed limit that the admin had just created).

- I had your standard run of the luck.  Winning 25 times over a ~6k sample.

- During this period of time, the admin changed the system from 3 decimal places to 2 decimal places meaning that my 200x of >99.494 was now >99.5. [There was no notice of this and had I not scrolled back up into the chat where the admin briefly mentioned this, I wouldn't have known at all].  The client side was still showing 3 decimal places everywhere except the actual results.

- The next set of auto-rolled 5k bets resulted in 0 wins.  I deposited another .2BTC chalking this up to variance and produced 0 wins over another ~2k rolls.  At this time I changed my bet to .00001btc because of the low funds and to handle variance better.

- The next 15,000 rolls at .00001btc resulted in 0 wins as well.  I started to think something was off about this and started recording videos.  First, I recorded a 8 minute video, betting 3 times per second resulting in 0 wins.  I then created an 11 minute video (posted earlier in the thread) where I made a few 'bold' predictions that there would be exactly 0 wins in the next 5,000 rolls.  I ended up running out of money before reaching 3,000 rolls.

- I made the claim here and asked for a refund.  There was clearly something off and I approached the staff of the site.  To my surprise the admins were sleeping -- an unprofessional and incompetent move after being told numerous times that their site was vulnerable and that it was most likely broken especially since they have a responsibility to protect investors' funds.  The moderator responded with a very condescending and cocky tone and laughed at my claims.

- I then challenged the moderator and another user skeptical of my claims to bet 2BTC that I could prove to them that over the next 5,000 (putting the sum total of rolls at over 23,000 with zero wins) rolls at 200x (>99.494), I would end up with exactly 0 wins.  They were hesitant to accept this bet even though I basically begged them to accept and offered to have any trustworthy escrow hold the funds and release it to them if any win was shown on the site (pretty simple and straightforward way of confirming the winner of the bet) and that I was basically betting even money that I would win exactly ZERO times over 5,000 rolls instead of the many permutations of wins with a standard deviation near 75 wins over this period.  This is liken to betting someone at 1:1 that a roulette wheel will produce 20 black numbers in a row instead of any other result.  They both declined.

- I then decided to show them anyways creating this video (https://youtu.be/SbFX8BlH9XY) [in HD but cut-off at 8:30 for some reason] and https://www.dropbox.com/s/lbozfm9h2ev775h/2015-07-03-2133-58.flv?dl=0 (non-hd viewable, but hd when downloaded) where I bet the same amount at 200x for 5,000 rolls with (you guess it!) zero wins.  

- I then created a new account where I predicted that I would win within 200-600 rolls in which case I did.  I logged back into my original account with a new client/server seed and then started to win/lose at a normal rate.


Important Notes:
- There is an infinitely small chance, but nonetheless a chance (somewhere around 1 in a million) that this was just extremely bad luck.

- The videos are not completely solid proof as many can make a claim to variance (see above point), but what's very important to note is my body language and pure confidence in the fact that I 100% predicted and believed that this actual result (~1 in 25,000 [guess]) would be the only result to occur.  Further affirmation to this is my aggressive attempts to secure an even money bet on this (statistically speaking) anomaly happening.  The time stamps in the video along with my presence in real time show that there were no breaks in between, editing, or magic of any kind used to re-produce these results.
  
- I had the same client and server seed from beginning of my play, during, and after the hotfix that the admin applied that changed the decimal places and the system.  Only after the seeds were changed (different user and re-logon back to my original account) was play 'normalized'

- I did check a few of my bets (I was unable to check the earlier bets because the site does not allow access to them and I wasn't pausing the betting to check with 3 bets per second) and they did check out to be provably fair.  By a few, I mean 10 out of 33,000 total.


Conclusion:
DON'T PLAY OR INVEST HERE.  Simply put, it's not worth it and you can only blame yourself if you do not heed this advice and something inevitably goes wrong.  The admins and programmers are stubborn, cocky, and careless.  You can see this throughout many examples of interaction both on the site and through the forums here.  Their site is still not fixed and the site's admins could care less about the proper execution of math.  They also claim to have limited time and funds which leaves some concerns about their dedication to this site which can be abandoned or tampered with potentially leaving the users and investors s.o.l.  


legendary
Activity: 1288
Merit: 1043
:^)

It seems to me you don't care about nothing. All the valuable advise you got here -- you don't care! All the rightful critics here -- you don't care! What must happen to your site that you do care?

id think its more a show of arrogance than anything, believing that all this will have no negative effect on their site. if the arrogance and stupidity wasnt made clear before, it sure shows now.
sr. member
Activity: 252
Merit: 250
DaDice Administration
we have very limited budget and time

Budget being limited is pretty much normal for a mediocre site but that being said the time to make your site into a perfect flaw free site should always be there. You cant run a site if you have no time to check on such huge flaw .

But our priorities are security, speed, functionality.

If security is your priority than you should have taken the action to take down the site to check on all the rounding issue on your site. The fact is that you are twisting your words and you dont actually take an extra measurement for the security because you are not protecting your investor nor your players because of this flaw

so they won't be able to select non profitable Payouts.

Is there even a "non profitable payout" ? As far as I know all payout is profitable because it gives your atleast 1.02 minimum in most site or do you actually mean that player wont be actually able to select a high multiplier like XXXX to prevent this things from happening? If this is so then you are not fixing anything, you are just limitating the ability for player to abuse your system which is a sign of bad move because people will see how incompetent you are

P.S : I could be wrong on this

This will be done next week. Until then site won't be closed as it was running with this bug for 1 year now and nobody complained about it, and some probably profited a lot. Won't even calculate.

Seriously this is another proof of how incompetent you are and as well as the site is. Also a proof that people should stay away from your site. It is not that nobody complained about it just that people doesnt even know what this means and they probably have no idea about this before because it is only happening in a specific multiplier


Yeah you are wrong on this. Payout 4960x currently gives you more than payout 4800x. But odds are the same.

Second thing is, I don't care if you don't play on our site really. We don't need players like you on our site for sure. We are friendly community and we are having fun as is. Most of players play with faucet only and we are happy with that. Those who invest on our site support and trust us.

It seems to me you don't care about nothing. All the valuable advise you got here -- you don't care! All the rightful critics here -- you don't care! What must happen to your site that you do care?
hero member
Activity: 602
Merit: 500
In math we trust.

Quoting just for references in case few hours later someone find a rounding issue again
Nice idea! Because I did!
Set bet amount to 0.00000001 (one satoshi) and payout multiplier to 1.5
You can't divide a satoshi so 1.5 gets rounded to 2.
The house edge is 32.24%. (Roll over 33.86, or Roll under 66.13 with 2x payout)

To crypto-games.net admins: Will I get a price for this?  Kiss
If i play for 1 satoshi and win, i get one, not two.

So i dont know what u mean that i will get two, multiplier is set to 1.5

ClamCoin
No. You don't get one, your profit is one.
You get two satoshies on win, but your bet is one, so the rest is your profit(one satoshi).
sr. member
Activity: 448
Merit: 250

Quoting just for references in case few hours later someone find a rounding issue again
Nice idea! Because I did!
Set bet amount to 0.00000001 (one satoshi) and payout multiplier to 1.5
You can't divide a satoshi so 1.5 gets rounded to 2.
The house edge is 32.24%. (Roll over 33.86, or Roll under 66.13 with 2x payout)

To crypto-games.net admins: Will I get a price for this?  Kiss
If i play for 1 satoshi and win, i get one, not two.

So i dont know what u mean that i will get two, multiplier is set to 1.5

ClamCoin
Pages:
Jump to: