Topic: Hufflepuff Making 2k BTC On PrimeDice Nov 2014. March 2015 Update: He Cheated - page 3. (Read 50021 times)

Also: https://www.hackread.com/gambling-site-hacked-bitcoin-stolen/

Horribly confused piece, with nonsense like:

"the game displays the player an encrypted randomly generated value before the bet, which is called the server seed. This seed is to be shown to the client seed by the player" etc.

Wow, it was a good read now I know the whole story. Until now I thought that Hufflepuff was a single account, never knew that he used many aliases before and after Hufflepuff indicent.
I wonder if Huffle is lurking around under another nickname on our forum or maybe researching new way to exploit the system of online casinos.
This massive loss was probably the primary reason why PrimeDice ceased their signature campaign...

seriously? Are we keep on going on and on again with the.. gambled large $ every roll... oh c'mon enough with it, you guys keep on saying the same things to boost your post count.. WTF!

i was on pd when he cheated, for sure it was an incredible show, tons on dollar every second.....what a crazy play

i witnessed it when hufflepuff rolling on primedice...

thats the most intense condition, all eyes focus with the High roll...but he did that by cheating..

Indeed, Stunna's official report is on https://medium.com/@Stunna/breaking-the-house-63f1021a3e6d and the link can be found in OP of this thread.

http://www.casino.org/news/primedice-com-loses-over-1-million-to-player-exploiting-coding-flaw take a look here

Stunna already posted about the story, I'm too lazy to get it for you.. try researching it.

Still No proof for cheating him from stunna ?

I had thought that was the trigger, and could affect the other sites as well. As for the final address it wouldn't help as it is likely he wouldn't have sold the coins and in the past it has been unlikely that any hacked coins have been recovered.

Bitmixer does not use "accounts" you go to their website, tell them which addresses that you want them to send to, tell them what percentage each address should receive (12.346% to address "A", 36.257% to address "B", and 51.397% to address "C" - for example), you give them a time delay for each address (zero for address "A", 4 hours for address "B" and 2 hours for address "C"), then they give you an unused address they have the private keys to for you to send to. If you were to send 100 BTC to that address, then they would send 99.5 BTC to those addresses with the corresponding percentage minus .0005 BTC for each address. They claim to mix tens of thousands of BTC per week so if you only mixed 100 BTC then there would probably be a lot of possibilities as to which outputs belong to you. However mixing thousands of BTC would probably give them less privacy.

Bitmixer has since changed how they work so you can customize the fee they charge so an onlooker doesn't know exactly what the total sum of outputs will be exactly.

Figuring out which addresses belong to Bitmixer in itself would probably be a difficult task because they do not reuse addresses.

I believe that bitcoinfog uses an account system, I am not sure exactly how they work, however I know that they make heavier use of old addresses (they reuse addresses) and I don't think they send outputs in even amounts like that because they have such a wide range of how much money they mix for their customers (some only want .5 BTC mixed while others want 50 BTC mixed).

I've never looked into how mixers work, but it seems pretty obvious that you would only allow withdrawals of particular sizes. If you want to withdraw 2,224.35x BTC then maybe you have to make 2 withdrawals of 1000 BTC, 2 of 100 BTC, 1 of 10 BTC, 4 of 1 BTC, etc. Then your plan of "look at all outputs that add up to ..." fails immediately, since all the outputs are of generic sizes.

In order to increase privacy, you should have the mixer withdraw to multiple addresses in order to make it more difficult to track your money, however like I said before, if someone knows all the addresses that belong to the mixer then if you know that someone mixed exactly 2,235.5326 (for example), that bitmixer charges exactly 0.5% of the amount mixed plus .0005 BTC per output address then you would need to look at all the outputs of bitmixer over the next 12 hours that add up to 2,224.354937 BTC (99.5% of 2,235.5326 while adding .0005 to each output in order to figure out where that person's money ended up.

That is a lot of work to do and I checked the transaction and I see that it is going through a lot of addresses. I have never used bitmixer before but I read it that they can mix your btc in one piece and from the transaction from the thief the btc is send to a lot of address by splitting them into a lot of smaller pieces. Does this mean the thief use multiple address of a mixing company?

If someone used a gambling site to mix the coins then someone would simply need to ask the operator of the gambling site to find out where the money went. In many cases the owner would likely be willing to give up that information because that is not what their site was designed to do.

For a mixer like bitmixer or bitcoinfog, their service is specifically designed to allow people to have privacy and if they are true to their word, will not reveal where a certain customer's money was sent to.

It is possible to track funds through a mixer. All you would have to do is know which txid that funds were sent to the mixer, the fee the mixer charges then look at all the transactions that were sent by the mixer over the next 12 hours (for bitmixer) that add up to the total amount mixed (minus the fee). For smaller amounts there will be a large number of possible outputs that belong to a certain customer, however when you have 2,000+ BTC total output, the total number of transactions is much smaller. The difficult part is trying to figure out which transactions belong to which mixers as if they do a good job their various addresses will not be spend linked together.

Does this mean that even a coin is mixed then it still can be track? Back in the day, I know that many people use bitcoin gambling website such as primedice and justdice to launder because there are so many incoming deposit and withdrawals there and your coins will never be trackable. He could be using bitmixer and I never heard someone track a coin after it is mix by bitmixer

Lol. I believe this level of blockchain analysis is probably a bit advanced for me. He probably used mixers and coinjoin transactions which are going to require advanced software to even potentially try to track which is something that I don't have access to.

i doubt that they will find the identity of hufflepuff.. he probably washed the BTC by using a mixing service that way its no longer can be detected if not then it will probably take more time to find it.

I believe that stunna actually said that husslepuff caused PD to have overall losses, but that after a shot period afterwords they were back in the black.

They probably lost more then 2,000 BTC from the entire incident if the exploit was being used since PD3 opened.

I am pretty sure its the overall accumulated amount.