Finding a Bug - page 3. | Bitcointalksearch.org

Dunamisx

hero member

Activity: 952

Merit: 555

Quote from: SamReomo on January 04, 2024, 01:43:41 PM

Quote from: Sling0 on January 02, 2024, 10:25:33 AM

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

It's always something good to find a bug a d report such as appropriately needed, if we are to consider the gambling sector for now, we are not having more of the people interested in this and it's all because they have experience low rate from how this is actually happening, you may hardly get to find one, gamblers will be so focused on having their fun in using the casino than looking for bugs around when majority are even after winning their bets, we can therefore see this that it's not common and that rampart as before that they were being discovered, however, we shouldn't still relent from finding more because they still exist.

Woodie

hero member

Activity: 1834

Merit: 879

Rollbit.com ⚔️Crypto Futures

Quote from: seoincorporation on December 31, 2023, 01:02:34 PM

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Most casinos would pay a bug bounty if the bug is critical, you should contact the support on the site and ask for the right way to report the bug, maybe the site has an special mail for that.

Easier said than done!

If am not mistaken there was a case here on the forum were one of the users did find a bug on one of the platforms and reported it and they claimed to have already known about and never paid this guy which makes this approach kind of a win-lose scenario as they could easily choose not to pay, and use your valuable bug report without you knowing...

Quote from: seoincorporation on December 31, 2023, 01:02:34 PM

And remember, if you exploit the bug your account will be closed and you will not get a bounty, that's why is important to report it as fast as you find it.

Talk without action yeilds no results!

Why not do it the white hacker way, exploit this bug into a test account and make so much money and then report it and show them to what extent this can be used and then they can take this report seriously and possibly payup the bounty prize too...this way it's a win-win, they pay up and keep funds on test account or not pay and allow you accesss to the test account with bugged fund's Tongue

SamReomo

hero member

Activity: 784

Merit: 672

Top Crypto Casino

Quote from: Sling0 on January 02, 2024, 10:25:33 AM

Yes I have reported it to the casino....Snip....
Still waiting for them to update me and also receive a thank you$? 🙄

You have done a great job by reporting the bug to the support team of the casino. If they find the bug as harmful then surely they'll compensate you for it and even if they don't that's still okay because you have done a great job anyway. I would recommend you to wait for their response if they're a reputed casino then you'll surely get some reward for reporting of that bug. It's not always necessary for a casino to run a bug bounty program but if someone finds a bug and reports it to a casino then in most cases casino appreciate that favor and reward such person with some money.

fapar

sr. member

Activity: 1414

Merit: 270

Undeads.com - P2E Runner Game

Quote from: abel1337 on January 03, 2024, 03:26:20 PM

Quote from: fapar on January 03, 2024, 02:30:03 PM

Quote from: rodskee on January 03, 2024, 03:13:33 AM

Quote from: Dunamisx on January 02, 2024, 01:11:54 PM

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

This is actually "every medal has its reverse". That is, casinos want errors, if they exist, to be found and eliminated, and at the same time they are afraid that these errors will be used before they are published (transfered information to the casino about the existing error). In this case, of course, it is logical to hire a third-party company specializing in security, but this will incur greater costs than announcing a public bug bounty program, but at the same time it will be more reliable.

Fivestar4everMVP

legendary

Activity: 2422

Merit: 1083

Leading Crypto Sports Betting & Casino Platform

Quote from: Blowon on January 04, 2024, 10:03:07 AM

On some sites you will get an award even if the bug is minor, let alone critical. but on some casino sites. like cheap casino websites or just starting out with small capital they think they won't pay you even if it's a critical bug unless you are a kind person who wants to volunteer something like that. If the bug comes from a large casino website with many communities, they will definitely pay you no matter how small the bug you get, you will be greatly appreciated. about how. I believe it is more effective to send them the email that is listed on their website.

Well, the actually truth of the matter is that, even some big gambling casinos are way more stingy than a start up, so, it still not every casino, whether big or small, that will be ready to pay for a bug that is minor, most won't actually, so what I think is, if the bug is minor, simply just point their eyes to it to get them notified, but don't expect any form of appreciation or reward.

But if it's a critical bug, like one that would allow hackers or even users use that bug as a means to steal from the casino real big, then some bug casinos definitely will reward a person for discovering such bug and not exploiting it, and some small casinos will also reward the person too based on their financial capacity.

But like I said before there are still some really big casinos that won't give a damn, what they did do is go behind you and fix the bug, and come back to tell you there was never a bug like that.

goldkingcoiner

legendary

Activity: 2240

Merit: 1993

A Bitcoiner chooses. A slave obeys.

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You should ask the casino. Depending on the severity of the bug and what you can do with it, your reward might be quite high. Also, remember: they know that if they do not pay you then you are not obliged to tell them anything. Furthermore, they know that if they do not reward bug hunters, those same people could simply sell the information to hackers and other shady characters. So it is in their best interest to reward you (but do not tell them this, because they might take it as a threat, which is illegal). Don't be afraid to haggle over the price and do not let them take you for a chump. Bugs can be very valuable. Although some bugs can be completely worthless.

aioc

hero member

Activity: 2926

Merit: 567

Quote from: Sling0 on January 04, 2024, 09:49:15 AM

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

I think you should gather all your pieces of evidence they mentioned that you would be compensated not a guarantee but at least they should give you an update and I honestly believe that you should be compensated, a bug is something that will cause big losses to any platform, if they ignore you and never give an update or compensation you should name the casino so we can question why they fail to compensate you on something that you deserves, if they promise you compensation then it deserves a thread in the scam section.

Blowon

hero member

Activity: 1932

Merit: 511

Vave.com - Crypto Casino

On some sites you will get an award even if the bug is minor, let alone critical. but on some casino sites. like cheap casino websites or just starting out with small capital they think they won't pay you even if it's a critical bug unless you are a kind person who wants to volunteer something like that. If the bug comes from a large casino website with many communities, they will definitely pay you no matter how small the bug you get, you will be greatly appreciated. about how. I believe it is more effective to send them the email that is listed on their website.

Sling0

newbie

Activity: 12

Merit: 0

Quote from: Reatim on January 04, 2024, 03:39:40 AM

Quote from: paxmao on January 03, 2024, 07:30:58 PM

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

I believe the bug is now fixed since I can no longer repeat the issue. I haven't heard anything back from the casino since first reporting it and re-creating on their test server. I did hope that they would throw something my way given the severity of said bug because it was SEVERE and probably did cause major loss for them imo. I'll give it a few days and make sure they have it corrected and at that time if no reply I'll open it up to the community for evaluation and discussion. The bug already has me questioning other things that don't make any sense.

Reatim

sr. member

Activity: 2828

Merit: 357

Eloncoin.org - Mars, here we come!

Quote from: paxmao on January 03, 2024, 07:30:58 PM

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

That is exactly what have been said by many mate that he should not expect payment instead it will be awarded voluntarily and since OP have not been online for 2 days now does it means he already accepted His faith here and forget about reporting ? or he had already have a deal and now keep the silence as he already received the payment.
but better for him to return and share his thoughts and experience and then lock this thread to prevent from being spammed in long time as this will never end until he locked Him up.

cafter

full member

Activity: 448

Merit: 223

I also had that idea of earning something by reporting bug or mistake on the site.
wasted like some hours finding some page errors, spelling mistakes, more basic stuffs but do not found anything, I was finding basic things
because i didn't have programming or hacking knowledge. also if someone is ethical hacker and found a security bug then they can report it to the casino,

Quote from: paxmao on January 03, 2024, 07:30:58 PM

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

yes, maybe you waste you entire time and find nothing in the end.

dezoel

legendary

Activity: 2044

Merit: 1075

Leading Crypto Sports Betting & Casino Platform

Quote from: NeilLostBitCoin on January 02, 2024, 01:56:39 PM

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Before reporting a bug in a casino, it's important to check whether they have a bug bounty program in place. If they don't, it's unlikely that they will reward you for finding a bug and they may even ignore who reports it so it's up to you if you still want to report that bug. You can ask them beforehand if they offer any credits for reporting bugs. If they do, then you should cooperate with them and assist them in fixing the bug. Once the bug is fixed, you can expect to receive your reward if there is one.

In our forum, there are several reports about a user claiming that they haven't paid for the bugs that they find despite of the site having a bug bounty. If they don't like the report, they can always reply and explain, not that they ignore the message or they just "seen" it.

We don't know though, maybe they are only talking advantage of it for free. Then there is that platforms who don't put a bug bounty message but if we inquire them, they are glad to offer some incentives. I think they have a reason for this like they don't want the public to know that their site is buggy, as they are afraid that someone can take advantage of it personally.

paxmao

legendary

Activity: 2366

Merit: 1624

Do not die for Putin

usually you may report a bug and hope to get some short of reward for your white hat action on the matter. However that is strictly voluntary for the site, so no guarantee. Another way to go about it is try to reach a deal with the site, still risky unless you get a third party escrow into the matter. Ideally casinos should have a permanent bug-hunting programme altogether, but... no easy way for this despite looking quite obvious they should.

abel1337

legendary

Activity: 2492

Merit: 1145

Enterapp Pre-Sale Live - bit.ly/3UrMCWI

Quote from: fapar on January 03, 2024, 02:30:03 PM

Quote from: rodskee on January 03, 2024, 03:13:33 AM

Quote from: Dunamisx on January 02, 2024, 01:11:54 PM

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

BenCodie

legendary

Activity: 1666

Merit: 1037

If it is a user interface bug, expect no more than a pat in the back. If it is a non-exploitable/non-vital platform bug, don't expect a reward but it should be more likely to get one as it may help patch a hole in leaking/lost business as a result of the bug. If it is an exploitable bug, it should definitely be rewarded.

That's my 2 cents generally...however...

Quote from: Sling0 on December 31, 2023, 06:57:21 PM

Quote from: acroman08 on December 31, 2023, 05:02:38 PM

Quote from: Sling0 on December 31, 2023, 04:12:53 PM

In my opinion it's a substantial bug but again I'm not qualified or educated enough on it. But if I can exploit it then others would have fun. Very reputable casino with a large reach. I've contacted support and waiting. No bounty page on their site but for sure reputable so I hope they would compensate given the bug.

looking forward to what they have to say when you show them what bug you found, I am also curious about which casino you found this bug on and what issue/exploit the bug is causing(would you mind sharing what casino it is? you don't have to if you don't want to share the name of the casino).

BC Game. I messaged them on here yesterday but no response

...I wouldn't count it from this casino. They've been known to hold balanced and freeze funds for extended periods of time, until they suddenly had someone come and solve all problems months later. If you didn't message that account handling their "PR 2.0" (so to speak) then you can do so here:
https://bitcointalksearch.org/user/bcgame-support-3592321 - This profile is the support account. The OP of their thread is (apparently) for some other purpose.

fapar

sr. member

Activity: 1414

Merit: 270

Undeads.com - P2E Runner Game

Quote from: rodskee on January 03, 2024, 03:13:33 AM

Quote from: Dunamisx on January 02, 2024, 01:11:54 PM

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

pawanjain

hero member

Activity: 2702

Merit: 716

Nothing lasts forever

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

Not all the sites pay bounty for a bug reported. Some sites don't pay at all and just say thank you.
Some sites pay a bounty out of their choice and the other sites have a bug bounty program itself.
You have to go through their bug bounty program page for knowing the rewards for the bug types.
Also, you should know how to report a bug because there is a format to do so.

Reatim

sr. member

Activity: 2828

Merit: 357

Eloncoin.org - Mars, here we come!

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

I think it has been completely answered above that you have not to expect any payment at all unless the site is generous enough to pay you , they did not ask you to find bug , actually this has happened before and the account that reported the bug did not received any amount so he needs to create a thread here but to reality , he received criticism for expecting payment when he wasn't even tasked to do that bug finding , and if you have found this accidentally then just let it out , or not act anything and just pretend this isn't happened .

rodskee

full member

Activity: 2520

Merit: 204

Quote from: Dunamisx on January 02, 2024, 01:11:54 PM

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

PX-Z

hero member

Activity: 1554

Merit: 880

pxzone.online

Quote from: Sling0 on December 31, 2023, 12:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

If they have bug bounty, then properly report it, and you will be paid by how depth it is and by their bounty program rewards system.
But if they don't have such, i don't think they would care. You might get just a "thank you" without getting paid or getting a reward.

Now if your intention is just to help, you're okay to not getting paid when you report such bug, it's okay, but of if not, i don't mind reporting them as well.

Topic: Finding a Bug - page 3. (Read 650 times)