This morning I stumbled across a error in Bitbook.biz that allows BTC to be transferred out while a bet is pending.
Basically what I did was I placed the following bet:
Looks like I lost correct? No, I found that BTC can bet transferred between BitBook.biz accounts even while the bet is pending! So once I saw that my one pick lost I transferred the BTC to a friends account who is also on Bitbook.biz. (My friends account has been blacked out due to privacy, but Bitbooks.biz has been made aware of all accounts associated via PM.)
From this account I simply sent the 4BTC out of the Bitbook.biz website and it was as if I never placed the bet
Blockchain info:
https://blockchain.info/address/17kceCdAeEiQ2fgZz5nxjzhoi9TdhjgSGsAfter discovering this error I decided to test the system to see if I was about to place bets on account and then send the BTC out of the system, but still get paid.
I wanted to cover my butt in case the accounts were frozen so I informed a trusted member here on the Bitcointalk.org website of what I was doing so if my funds were frozen Bitbook would refund my funds frozen into the accounts.I sent a additional 15BTC+the 4BTC from my error into Bitbooks.biz for testing.
https://blockchain.info/address/15dBLXY5v1bDF5KN37x47K4RaiPsoVoUbu(Later I sent a addition .1BTC for testing withdraw.)
https://blockchain.info/address/1L8XoWuf35GinnnBTAYPEJaN1xfZhpVDH5I then started the accounts bet2win-bet2win1-bet2win2-bet2win3-bet2win4-bet2win5-bet2win6-bet2win7-bet2win8 and bet2win9. With these accounts I was able to place my pending bets and then use the same transfer option to fund the other accounts.
This is what the accounts look like on all 10 accounts:
Once I had placed all the bets I sent the 19.1BTC to the account "Wallet2Win" to be transferred out.
At this point Bitbook.biz froze all the accounts with the 0 balance/19 pending, including the Wallet2win funds to be transferred out. I never had the intentions of ever stealing any of the fund that were frozen, I was simply checking the system.
I am asking Bitbooks.biz to please refund my 15.1BTC (4BTC of that was lost due to losing that Parley bet. When I make my bets, I pay my bets.) Any bounty that can be tipped to me for showing this error would be greatly appreciated. I have no concerns about getting my BTC back because I honestly believe Bitbooks.biz are ran by stand up people. (And I have already lost 20BTC in bets there between my group of friends)
Bellow is my COVER my Butt policy:This is a series of e-mails I exchanged for "information" escrow to the owner of Satoshibet.com (stand up guy, I won .443BTC into over 20 and was paid.)
Re: Great site!!!!!
« Sent to: addi on: Today at 01:27:49 PM »
Quote Reply Delete
Yes thank you. Would you mind if I use you as escrow for information I just found out so it doesn't look like I am trying to steal BTC from a error I just found on a website?
I don't want them to keep my 19BTC (it is in the process of being sent out of their accounts) because they though I was trying to rip them off, I am going to alert the site owner once I see that the site actually has a flaw?
Just worried they may have to manually approve the 19BTC (which they very well may not) and they will think I am trying to steal.
I am going to ask them for a good size bounty of course because it is a major error. _____________________________________________________
Re: Great site!!!!!
« Sent to: BayAreaCoins on: Today at 01:34:17 PM »
« You have forwarded or responded to this message. »
Quote Reply Delete
Is it a bitcoin gambling site? What's the flaw? _____________________________________________________
Re: Great site!!!!!
« Sent to: addi on: Today at 01:41:17 PM »
Quote Reply Delete
Yes it is a gambling website, you have to swear you will not exploit it. I want to tell someone so I am not doing any wrong. It is on bitbooks.biz I am going to alert the owner once I see there is actually a problem.
It is a way to place bet but yet transfer the money out in case you are going to lose, just a flaw in their system.
I just want to make it perfectly clear that I have NO intentions on keeping the BTC earned from this. ______________________________________________________
Re: Great site!!!!!
« Sent to: BayAreaCoins on: Today at 01:45:23 PM »
« You have forwarded or responded to this message. »
Quote Reply Delete
Sure, noted. _________________________________________________
Re: Great site!!!!!
« Sent to: addi on: Today at 02:11:38 PM »
Quote Reply Delete
Gosh I am nervous that they keep my 19BTC but I had to try the flaw on a large scale to see if it worked!
(just threw up I am so worried lol, I placed like 200BTC worth of bets with 19BTC.)
Thank you very much BTW man I will keep you up to date Here is my post on my Free Escrow service:
https://bitcointalksearch.org/topic/free-escrow-257222Well that is my findings and I hope I have proved beyond a shadow of a doubt that my accounts frozen/pending withdraws were not of ill mannered/nor would I have stolen the coins. Hopefully this is clearly enough written so I can recover my test BTC.
It is important to myself that I build a positive rep here on the site, especially since I plan on Buying/Selling BTC face to face as a store front.
My frozen BTC can be sent to 1EgN9QatDmmxEiBDxVbqj8cWrV2AFFpdkb (this is a bitbook.biz account as well.) Thank you for your reading pleasure!BAC