Author

Topic: [HOT] SATOSHIDICE - Negative rolls bug. User makes around 15+ BTC from 1k satos (Read 1556 times)

hero member
Activity: 1666
Merit: 565
why can you roll a negative number?
newbie
Activity: 28
Merit: 0
SatoshiDice asks you for a client seed, and then adds it to their server seed, modulos it by some number to generate the roll result. Instead of picking a positive client seed, someone picked a negative client seed, which invalidates the scheme as it shifts down the range. If the seed is negative enough, the roll will even be negative. Negative is less than any target, so the bet always won.

In short, SatoshiDice didn't validate the client seed, which their scheme requires it to do.

wow that seems like a huge mess up, especially given that they are one of the most well known btc gambling sites...
legendary
Activity: 2557
Merit: 1886
SatoshiDice asks you for a client seed, and then adds it to their server seed, modulos it by some number to generate the roll result. Instead of picking a positive client seed, someone picked a negative client seed, which invalidates the scheme as it shifts down the range. If the seed is negative enough, the roll will even be negative. Negative is less than any target, so the bet always won.

In short, SatoshiDice didn't validate the client seed, which their scheme requires it to do.
newbie
Activity: 28
Merit: 0
what does this mean? were they hacked?
hero member
Activity: 840
Merit: 524
Yes!
A user made around 10 to 30BTC after setting a negative client seed resulting in negative rolls.
Negative rolls:
Saw a large streak of bets winning. But when i reloaded, it
disappeared because of losing bets.
There were more than 10 winning bets. Couldn't take pic.







by user: https://satoshidice.com/user/0564cdf5ebb432a770e0ade6e6e06c5c



The issue has not occured again.

The user had topped almost all the leaderboards. i requested to remove it, and immediately it was removed. idk whether it was a coincidence.
The support doesn't respond.

Only if there was no max win. :p
Jump to: