Topic: [Cryptoplay.io] CRYPTOPLAY CASINO SCAM - RIGGED FAIRNESS (Read 222 times)

---

@seleme it checks out.
So as it turned out, it's a bug that displays fc86f14b39cb68ef55a9c0f8133494fa5f340a1b17b5af0d285af6247507815a (to anyone) until the server seed gets revealed
because it's the hash of the placehodler text "Server seed has not revealed yet!"
(after changing your server seed, you can check your new bets with unrevealed server seed if it's still that hash... unless if the bug is patched)

Anyway, the only way to check your previous bets is if you have screenshot of the non-bugged "provably fair window" before that bet to see if it's 4d15ef41be8c0d1ac427924e71bd249d5c44587d95262b54fa3127a6321c1203.

The thread is not about the specific bet but the reputation of the casino.
It's good that you've provided clarifications since seleme failed to provide those info but please don't forget that it's the bug in your casino that's the root cause of this ruckus.

regards,

Hi , I am the support agent to who you spoken , I am here to give you some clarifications , that was an error and of course it was not intended, as I talked to the programmer there was a wrong line placed in the bet pop up, but in the provably fair window it was the correct sha256 hashed server seed , now if you will hash the next sentence: Server seed has not revealed yet! you will see that it will return the value : fc86f14b39cb68ef55a9c0f8133494fa5f340a1b17b5af0d285af6247507815a which is that original Hashed Server Seed, so this is what happened , and as I said , if you would have opened the provably fair window at that time you would have seen the correct original Hashed Server Seed, but you prefered to open a thread and make acusations of us being scam , wanted to steal from you $0.00000001 , have a wonderful day

In general, a server seed is going to be unique for each player, because once it is revealed to one player, any other player can potentially learn the seed, and bet accordingly.

As I mentioned previously, if the server seed is constant, and a nonce is used, it is much easier for players to verify bets, than if the server seed changes after each bet. However, changing the server seed after each bet does not remove the provable fairness. If the server seed changes, the change will need to be displayed to the player in advance.

In this case, it appears that the representative is not understanding your concern, or they are intentionally answering a question you are not asking, if your screenshots are genuine.

Assuming OP is honest. I do not see why should he be making up an story unless he lost too much money with them, they had a profile with us and OP wanted to ruin their reputation.

It's possible that the casino is selectively changing the seed (Everything are saved in a same server, right?). When a user is winning big or winning good money maybe they are then changing the seed so that they do not need to pay the player.

There are review sites and there must be other people who have experienced the same before. Have we checked them yet?

What is the point of PF if the different server seed hashes are provided to the user on a particular seed? To prove the fairness and verify bets must be done through Server Seed + Client Seed + Nonce, PF casinos have to provide Hashed Server Seed of Server Seed since the user has to know the Hash of Server Seed that is used to verify bets and user has to match Hashes during the verification process. If Casino cheats with another Server Seed, the provided Hashed Server Seeds will be different, simple as that.
I am 100% sure this is not how Provably Fair works and curiously made a new seed on CryptoPlay casino to check if Hashed Server Seeds are different before/after changing seeds on the same or different nonces as Support member says it is applied to first bet?!..  The Hashed Server Seeds are the same on all nonces(1,2..100) during making bets (before) and checked the same bets after: Resetting seed for checking previous one doesn't change the Hashed Server Seed.  Support obviously lying!

When we saw the difference it was also a shock for us, how casino can be so greedy to scam users. House edge works for them but IDK maybe they needed more $..  Ofc they are not stupid doing the same trick to another user (maybe you  pre-rolling with dust, IDK) especially if one user has caught this scam technique and made public thread. Everything should look like "fair" while some random guys come to look for "anomalies" on the website.

It was the first time I saw different hashes on the same bets, then I checked other screenshots to see if maybe I did something wrong but all screenshots have the same Hashed Server Seed starting with but on the website, the Hashed Server Seed was different after post-reveal. You can check proofs to find the different timestamps on screenshots stating my HSS is different.  It was not for a single bet btw, I have uploaded min 3 photos of HSS starting with . Regarding the last lines, please check screenshots and tell me how fast the user should be to click F12 find the area and paste my own code then took a screenshot to show(Check timestamps on pics pls). BTW, I have google open tabs where I have searched both HSS and Client Seeds after losing my 5th deposit without a single withdrawal. If I knew Cryptoplay is going to scam, I should look for screen recording software to prove the hashes gonna be different which is impossible to know for user without taking a new seed and reveal the previous Seed.
This seed was 5 days old, and I lost 5 deposits doing high bets on this Keno pattern(check SS) then I decided to continue this tomorrow. After losing my last -$170 depo, decided to stop chasing this pattern(over 35000 rolls on the same pattern, the same seed which is weird - 7 times higher than the average hit for 500x Keno on 9 tiles-(5300 in average per 500x)).  I hit 500x Keno on 0.1^7 CPC dust aka demo money, changed seed right after hitting 500x to verify seed, (bingo!)  HSS don't even look similar, I understood I was scammed at this point.

Quote from: nc50lc on October 19, 2022, 12:16:33 AM

If it matched, then that BetID's revealed server seed hash was really the value used by the casino, not the previously presented different server seed hash which is different.
And that's not provably fair since they've initially presented you a different hash for the same BetID.
Given the one-way nature of hashing functions, there shouldn't be any other server seed that will produce the same hash.

If it didn't match, you should ask the casino to present the 'server seed' that results with fc86f14b39cb68ef55a9c0f8133494fa5f340a1b17b5af0d285af6247507815a

Support says, our rigged seed is all you need, go verify and you will see every bet is PF, and ignores all my questions let alone asking what is server seed of HSS starting with . They say Hashed Server Seed can be applied on the first bet of any seed. My theory is they found the perfect Server Seed that matches with my Client seed that gives the worst possible results on this Server + Client Seed combination(Weird, it hits 500x after 35k bets on this seed) since I chase a single KENO  pattern till it hits 500x. After hitting 500x on zero bet and changing seed, they instantly changed HSS to the one they used to cheat me,IMO.

Replying to the PM,

You made some serious allegation against the site. Changing the hashed server seed post-reveal is one of the nastiest things I can imagine a house doing. However, I tested the site with over 50 bets and I didn't see any irregularity in the site. They reveal the upcoming server seed's hash before we set the client seed (which is a good thing). I tested the results using my custom script and everything is in order. The server seed hash didn't change for me post-reveal.

Can you tell me how often did you see the difference between the hashed server seed pre-reveal and post-reveal? Is it for every bet or just for the one in the screenshot? I am sorry but the single screenshot is very less of an evidence to judge the legitimacy of a site. A user can easily edit the image with 'Inspect Element' and put a different seed to defame the site. I don't consider the evidence to be conclusive enough especially when my inquiry didn't reveal any irregularity in the fairness script. 

If that's true and considering they do not have a forum account, except having conversation we can not do anything else. Hopefully anyone who is going to play the casino somehow finds this topic and the discussion.

(I've received your PM)
You should do their suggestion to verify the result (so that you can use it against them) but I'm not familiar with PHP,
you should ask someone who is familiar with PHP and run their "fairness" code from here: cryptoplay.io/help/fairness#Keno
And verify Bet ID 11320148's result (you should provide the rolled numbers of that keno bet).

If it matched, then that BetID's revealed server seed hash was really the value used by the casino, not the previously presented different server seed hash which is different.
And that's not provably fair since they've initially presented you a different hash for the same BetID.
Given the one-way nature of hashing functions, there shouldn't be any other server seed that will produce the same hash.

If it didn't match, you should ask the casino to present the 'server seed' that results with fc86f14b39cb68ef55a9c0f8133494fa5f340a1b17b5af0d285af6247507815a
Then perform the fairness code again using that seed if it matches with the result.
If the above matched, then the previously revealed server seed/hash may be a display bug.

Note: For verification of the server seed hash, they seem to have used SHA256 to produce the 'server seed hash' but input the 'server seed' as "text" not "hex".
e.g.:

• "Revealed server seed" as text: 93bb49d435b86645490de1d51c634d2889d6f0c094897e3e46905d51d8baba51 -> 4d15ef41be8c0d1ac427924e71bd249d5c44587d95262b54fa3127a6321c1203
• "Revealed server seed" as hex: 93bb49d435b86645490de1d51c634d2889d6f0c094897e3e46905d51d8baba51 -> 8cebea681b8c01de1063c82b1f1f65bd5bc01ad76b5c91dc860801ffa8af76e8

That user also has not logged into the forum since April of last year as well as also carries a -3 trust score from my view. I doubt he cares if he gets anymore tags as it looks like they have abandoned the account.

In order for a casino to be provably fair, it needs to commit to the server seed before the bet is placed, and allow for the player to provide some additional input to be combined with the server seed (often referred to as the "client seed"). Once both the casino and player commit to their own respective seeds, some operation needs to be performed on both seeds in order to calculate the outcome of the bet.

Due to the fact that the same calculation done to both seeds would produce the same outcome if repeated, after each bet, the casino will need to change either the server seed, or add a nonce that is also part of the calculation that will change after each bet.

I personally think using the same server seed, and a nonce makes verifying bets easier for the player (which, in turn, will add trust to the casino), however changing the server seed after each bet will not invalidate the provable fairness, provided the hash of the server seed is known to the player before they make each bet.

---

In this particular case, assuming the screenshots are genuine, it appears there are two different server seeds for the same bet. If the casino cannot provide the actual server seed that hashes to fc86...15a to allow the player to verify the outcome of the bet, the casino is not provably fair.

Logically, the server seed must not be changed by the casino unless the player asks for a new seed and starts a new session.
If they are changing the seed for each new bet then why do they need a nonce in first place! It doesn't make any sense. Some players make make thousands of bets, you don't expect them to save the server seed for each bet. it's gonna take days to verify the fairness of the game. Not to mention that the player need to change the client seed too every time the server seed changes otherwise the whole pf system would be useless.
Obviously they are deceiving their customers by pretending their games are pf while they are not.
This casino is to be avoided.

Just read the truspilot review, so yeah it does have the same scam pattern as wixiplay, scrambling server seed history. If cryptoplay is a follow-up project from wixiplay, it's no wonder they don't advertise on this forum.

This member promotes cryptoplay in his signature space, I think he has something to do with this company. Unfortunately, he has been inactive for the past 1 year.

Some guys looks for new casinos on google  in a hope of finding a  bug in some of its in house games so they can use it abd manipulate the casino. So i don't think the OP also is with innocent thoughts. Otherwise why would he seafch for unknown casinos ?

It appears that they do not have a representative on the forum; I've never come across such a moniker, which makes it much more difficult for the community, as there is nothing the forum can do when it comes to off-forum scams. Despite the fact that, I checked them out on trustpilots and read a really interesting feedback, this is not the first time they have held winnings.

https://www.trustpilot.com/review/cryptoplay.io

There are trustworthy casinos on the forum, but most of you just Google random sites and deposit your money.

I am not expert is fairness verification or how it all works. It would be nice to hear from regular casino gamblers who play such kind of probable fair games.
Do they have a forum account? Your first priority now should be to PM the account that represent them on this forum and we wait for his response in the thread.

What happened::
Cryptoplay.io casino has rigged fairness and changed hashed server seed. My friend made 10 deposits to hit keno 500x on the same pattern on a new seed(over 35000 rolls/nonce) for days but this seed was the definition of "bad luck" before we exposed how Cryptoplay changed game results. He took screenshots at different nonces to save Hashed Server Seed to verify fairness after hitting 500x on this pattern. Over 35k nonce, he gave up to deposit and decided to play with the lowest possible bets to see how far the loss streak can go. He hits 500x on this pattern and decided to verify the seed on the PHP verifier.

He changes the seed to see the server seed that must be used to verify bets on that seed but the given hashed server seed doesn't match with the Hashed Server Seed on his saved screenshots. After checking different screenshots and comparing with the Hashed Server Seed given by scammers aka Cryptoplay casino, the Hashed Server Seeds are completely different:

The original Hashed Server Seed: 

And Hashed Server Seed on the bet after changing seed to verify previous one:

Same nonce, same client seed different Hashed Server Seeds mean scammers have changed Server Seed.
We have screenshots of other bets, you can check below links.

Experienced users can confirm why Hashed Server Seed is important to save for verifying bets so Casino didn't manipulate the game result after the user makes a new seed. As you can see on the saved screenshots, Hashed server Seeds are different on the same bets of this seed, clearly scam. Cryptoplay scammed my friend and he lost $700 on this seed.

---

Support clearly ignores my questions and keeps repeating  to check modified Server Seed "Go check the bets on the PHP verifier and send us screenshots". First Mario tried to "explain" why there are different Hashed Server Seeds on the same bet, he first tried to close case by simply telling it is "display error" but I told him I have more than 3 screenshots taken on different nonces/time. And on his second attempt to explain: Mario: So logically it means, hashed server seeds change per bet/nonce?! The worst part is Sam(manager) came to chat as manager but he refused to answer any of my questions, he didn't explain why the Hashed Server Seeds are not same on same bet/nonce. Sam: I shouldn't expect more from the support team of a Cryptoplay.io scam casino, none of my questions are answered and they tried to make it more complicated on provably fairness subject. They simply rigged the game results to scam users and get caught.




Cryptoplay(Cryptoplay.io) is a scam casino that manipulated game results, and rigged seeds to scam users!

Link to scam casino: Cryptoplay.io

Proofs:
https://ibb.co/album/nqdWCx (You can check same nonce bets but different Hashed Server Seeds, btw I have googled seeds as you can see on open tabs.)
https://ibb.co/album/RTc9kw