Hufflepuff Making 2k BTC On PrimeDice Nov 2014. March 2015 Update: He Cheated - page 4.

MICRO

legendary

Activity: 2464

Merit: 1037

CEO @ Stake.com and Primedice.com

Quote from: arallmuus on June 30, 2015, 06:02:44 AM

Quote from: David19 on June 30, 2015, 04:42:28 AM

Person who did this is no joke thats for sure.

Definitely no joke at all and it seems that they have made PrimeDice their primary target ever since launch. Also the fact that they/he have/has been mixing the withdrawal ever since his first time using the account Nappa / Kane https://blockchain.info/address/18dMBap634aESPTeD3FGcAgJ2S9n4qtBTZ

From the email address, IP used and other things that have been done. This guy know stuff on how to cover up his tracks and I doubt that he wont be stupid enough to keep a stash of coins in an address or put them through exchanger as chances are he might split them up into few address in smaller amounts

Quote from: fox19891989 on June 30, 2015, 05:19:21 AM

So you mean PD has earned over 10k btc from the gamblers? Good profit, I thought PD has earned over 50k btc from gamblers

MICRO get this number from the wagered amount x 1 % house edge because there is no data about PrimeDice's profit since it is privately funded. Currently PrimeDice has 1M BTC wagered so roughly that is around 10k BTC in profit . 50k BTC is 5 % of the wagered amount which is quite impossible I'd say even for PrimeDice

for references http://dicesites.com/primedice

Yes . I said EV is 10000 btc . Idk how much pd is in profit . Never asked .

.

Quote from: koshgel on June 29, 2015, 10:45:42 PM

Very interesting situation. Few things stood out to me. The integrity of Stunna and Primedice was one. I have a feeling that many other site owners would have closed up shop, ran away with customer funds, made up some excuse about being hacked, or denied huffle's large withdrawals altogether. You also have to show some respect to huffle, even though a crook, he used repeated ingenuity to game the system. Something I can respect even if I don't agree with the end result.

I cant respect him ever. I would respect him if he found that exploit and emailed it to primedice. He would got huge bounty for that and lots of respect.

Buziss

hero member

Activity: 896

Merit: 1000

Quote from: arallmuus on June 30, 2015, 06:02:44 AM

MICRO get this number from the wagered amount x 1 % house edge because there is no data about PrimeDice's profit since it is privately funded. Currently PrimeDice has 1M BTC wagered so roughly that is around 10k BTC in profit . 50k BTC is 5 % of the wagered amount which is quite impossible I'd say even for PrimeDice

for references http://dicesites.com/primedice

Is that 1M btc wagered stats for PD 3 only or is it for the whole time since PD started operation in 2013?

arallmuus

legendary

Activity: 2520

Merit: 1403

Quote from: David19 on June 30, 2015, 04:42:28 AM

Person who did this is no joke thats for sure.

Definitely no joke at all and it seems that they have made PrimeDice their primary target ever since launch. Also the fact that they/he have/has been mixing the withdrawal ever since his first time using the account Nappa / Kane https://blockchain.info/address/18dMBap634aESPTeD3FGcAgJ2S9n4qtBTZ

From the email address, IP used and other things that have been done. This guy know stuff on how to cover up his tracks and I doubt that he wont be stupid enough to keep a stash of coins in an address or put them through exchanger as chances are he might split them up into few address in smaller amounts

Quote from: fox19891989 on June 30, 2015, 05:19:21 AM

So you mean PD has earned over 10k btc from the gamblers? Good profit, I thought PD has earned over 50k btc from gamblers

MICRO get this number from the wagered amount x 1 % house edge because there is no data about PrimeDice's profit since it is privately funded. Currently PrimeDice has 1M BTC wagered so roughly that is around 10k BTC in profit . 50k BTC is 5 % of the wagered amount which is quite impossible I'd say even for PrimeDice

for references http://dicesites.com/primedice

fox19891989

hero member

Activity: 840

Merit: 1000

Quote from: MICRO on June 29, 2015, 12:09:09 PM

It was very interesting to read that story but we already knew almost all off it .

Its very possible that he can use that exploit on other sites to , cheater using that exploit is very hard to catch . Not possible without investigating database very closely . And even than its hard to prove that cheater is using that exploit.

But yeah, good to see that pd paid out 2000+ btc without any problem.

Max payout on pd will also be back to 40btc very soon so i guess they already earned back that 2000btc.

EV is 10000+ btc for pd , so pd should be in solid profit even without that 2000 btc that huffle got .

So you mean PD has earned over 10k btc from the gamblers? Good profit, I thought PD has earned over 50k btc from gamblers, but I think my estimation is too high, btw, 10k btc is good for a casino/gambling site, other casinos can't get so much money like PD. Congrats. Shocked

David19

sr. member

Activity: 441

Merit: 251

Quote from: Wendigo on June 30, 2015, 01:50:16 AM

So the end of the article is kinda open-ended and Stunna is offering a reward for bounty hunters lol Cool

Someone call Quickseller to investigate the blockchain.

I have already tried to investigate where the funds ended up and its almost impossible the coins have been mixed thro thousands and thousands of addresses. Person who did this is no joke thats for sure.

Wendigo

legendary

Activity: 2604

Merit: 1036

So the end of the article is kinda open-ended and Stunna is offering a reward for bounty hunters lol Cool

Someone call Quickseller to investigate the blockchain.

Altcoin4life

hero member

Activity: 560

Merit: 500

Quote from: koshgel on June 29, 2015, 10:45:42 PM

Very interesting situation. Few things stood out to me. The integrity of Stunna and Primedice was one. I have a feeling that many other site owners would have closed up shop, ran away with customer funds, made up some excuse about being hacked, or denied huffle's large withdrawals altogether. You also have to show some respect to huffle, even though a crook, he used repeated ingenuity to game the system. Something I can respect even if I don't agree with the end result.

True but it's not the only site with integrity, just - dice, luckybit, moneypot, betterbets...tho it was not cool huffle took it so far I mean 800 btc would a proved a point.

koshgel

legendary

Activity: 1148

Merit: 1001

Very interesting situation. Few things stood out to me. The integrity of Stunna and Primedice was one. I have a feeling that many other site owners would have closed up shop, ran away with customer funds, made up some excuse about being hacked, or denied huffle's large withdrawals altogether. You also have to show some respect to huffle, even though a crook, he used repeated ingenuity to game the system. Something I can respect even if I don't agree with the end result.

dooglus

legendary

Activity: 2940

Merit: 1330

Quote from: sherbyspark on June 29, 2015, 05:06:20 AM

Just read the article. Can't the same exploits be made on almost all the sites ?

The article didn't really say what the exploit was:

Quote

we found a handful of accounts sharing the same server seed.

Quote

Hufflepuff found a way to “confuse” our server, and made it give out a decrypted server seed that was also an active seed. This was done by sending it more requests than it could handle in a small time period, think hundreds of requests in under a second.

The first quote makes it sound like the seed generator either generated the same seed for two different accounts, or was only called once for two different accounts.

The second quote makes it sound as if the "reveal old seed" behaviour could be made to happen without the "replace old seed by new seed" action having been done first. Maybe sending too many requests at once could trigger that. But it doesn't fit in with the first quote.

So I think we're really left guess about what really happened, and why.

I think it's unlikely the same exploit exists on other sites. I don't see how multiple accounts would share the same server seed accidentally, or why a server would reveal its server seed without first invalidating that seed. But there's no guarantee that other sites didn't make the same obscure mistake(s).

David19

sr. member

Activity: 441

Merit: 251

Quote from: MICRO on June 29, 2015, 12:09:09 PM

It was very interesting to read that story but we already knew almost all off it .

Its very possible that he can use that exploit on other sites to , cheater using that exploit is very hard to catch . Not possible without investigating database very closely . And even than its hard to prove that cheater is using that exploit.

But yeah, good to see that pd paid out 2000+ btc without any problem.

Max payout on pd will also be back to 40btc very soon so i guess they already earned back that 2000btc.

EV is 10000+ btc for pd , so pd should be in solid profit even without that 2000 btc that huffle got .

Actually many sites have the delay on changing the seed, typically its about 5-10sec per seed change. I knew that was the problem/exploit when they fixed it in pd after hufflepuff

MICRO

legendary

Activity: 2464

Merit: 1037

CEO @ Stake.com and Primedice.com

It was very interesting to read that story but we already knew almost all off it .

Its very possible that he can use that exploit on other sites to , cheater using that exploit is very hard to catch . Not possible without investigating database very closely . And even than its hard to prove that cheater is using that exploit.

But yeah, good to see that pd paid out 2000+ btc without any problem.

Max payout on pd will also be back to 40btc very soon so i guess they already earned back that 2000btc.

EV is 10000+ btc for pd , so pd should be in solid profit even without that 2000 btc that huffle got .

David19

sr. member

Activity: 441

Merit: 251

Quote from: TYT on June 29, 2015, 11:59:34 AM

Quote from: sherbyspark on June 29, 2015, 05:06:20 AM

Just read the article. Can't the same exploits be made on almost all the sites ?

Quote from: Wendigo on June 29, 2015, 04:27:30 AM

Thank you for posting this great read and the Ocean's 11 picture is just so on point lol Cool

Primedice has been exploited on multiple occasions which is quite shocking....

I think most of the exploits were back in the starting years. It definitely has helped a lot of other sites as well, to learn from their mistakes.

According to the article the exploit wouldn't have been possible on the older site but was on the new one. I guess losses from thefts and cheaters are inevitable but goes to show you always have to remain vigilant and make security a number 1 priority as people will always try break into your site to steal whatever funds they can. Any big winners should always have a delay on their withdraws and accounts closely scrutinized.

I find it funny that stunna's lead developer was unable to find anything wrong with the account when the same account had inactive/active at seeds the same time. I mean wouldn't that be the first thing you would check in this case??

TYT

member

Activity: 78

Merit: 10

Quote from: sherbyspark on June 29, 2015, 05:06:20 AM

Just read the article. Can't the same exploits be made on almost all the sites ?

Quote from: Wendigo on June 29, 2015, 04:27:30 AM

Thank you for posting this great read and the Ocean's 11 picture is just so on point lol Cool

Primedice has been exploited on multiple occasions which is quite shocking....

I think most of the exploits were back in the starting years. It definitely has helped a lot of other sites as well, to learn from their mistakes.

According to the article the exploit wouldn't have been possible on the older site but was on the new one. I guess losses from thefts and cheaters are inevitable but goes to show you always have to remain vigilant and make security a number 1 priority as people will always try break into your site to steal whatever funds they can. Any big winners should always have a delay on their withdraws and accounts closely scrutinized.

isleepwithwatermelon

newbie

Activity: 8

Merit: 0

wow,what a story!
thanx for posting it

madonnino

sr. member

Activity: 322

Merit: 250

I ❤ www.LuckyB.it!

Quote from: micromen on June 29, 2015, 06:31:49 AM

Quote from: Coef on June 29, 2015, 06:26:58 AM

Quote from: micromen on June 29, 2015, 06:20:15 AM

Maybe it is all a conspiracy, and stunna paid hufflepuff/is hufflepuff so Stunna himself could seem more trustworthy because he paid 2k btc Grin

Why would he do that?
Primedice has been the most popular bitcoin gambling site long ago, and I don't think Stunna need to this kind of things to draw publicity. Plus, I doubt that making up a story of the site being exploited and losing lots of bitcoin could improve the site trustworthy level. On the contrary, it would more likely make people wonder if the site is secure or if one day the site will lose every single bitcoin to another hacker/scammer.

Its just a joke, just an idea, ofcourse it is very unlikely that that is what really happened

it is real or not sure this is a story that has affected everyone, bringing the mystery behind a winning nearly $ 1 million.
Primedice has nonetheless gained in advertising ', 2000 bitcoin lost or stolen will already been recovered I think.
Thanks anyway for a stunna however informed all the players and professionals, consider always pd says a lot more 'trustworthy

micromen

sr. member

Activity: 668

Merit: 393

Crypto-Games.net: Multiple Games, Multiple Coins

Quote from: Coef on June 29, 2015, 06:26:58 AM

Quote from: micromen on June 29, 2015, 06:20:15 AM

Maybe it is all a conspiracy, and stunna paid hufflepuff/is hufflepuff so Stunna himself could seem more trustworthy because he paid 2k btc Grin

Why would he do that?
Primedice has been the most popular bitcoin gambling site long ago, and I don't think Stunna need to this kind of things to draw publicity. Plus, I doubt that making up a story of the site being exploited and losing lots of bitcoin could improve the site trustworthy level. On the contrary, it would more likely make people wonder if the site is secure or if one day the site will lose every single bitcoin to another hacker/scammer.

Its just a joke, just an idea, ofcourse it is very unlikely that that is what really happened

Coef

hero member

Activity: 882

Merit: 1000

Exhausted

Quote from: micromen on June 29, 2015, 06:20:15 AM

Maybe it is all a conspiracy, and stunna paid hufflepuff/is hufflepuff so Stunna himself could seem more trustworthy because he paid 2k btc Grin

Why would he do that?
Primedice has been the most popular bitcoin gambling site long ago, and I don't think Stunna need to this kind of things to draw publicity. Plus, I doubt that making up a story of the site being exploited and losing lots of bitcoin could improve the site trustworthy level. On the contrary, it would more likely make people wonder if the site is secure or if one day the site will lose every single bitcoin to another hacker/scammer.

Coef

hero member

Activity: 882

Merit: 1000

Exhausted

Quote from: Wendigo on June 29, 2015, 06:12:58 AM

I think his wallet linked by Stunna shows around 7000 bitcoins so it's possible his net worth is maybe what approx. 10 000 bitcoins out of all the different wallets and stuff lol Cool

I don't think he will be hacking any sites any time soon lol.

7000 btc? Are you talking about the "Total Received" on https://blockchain.info/address/14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp?

Indeed, the address keep repeatedly sending 80 btc to 1BiPXmDrHm7VXZnWy6NnW1ZbPc4dcpfkH5 which is Hufflepuff’s deposit address and receiving 100 btc back from PD, so the "total received" figure is a lot higher than his net worth.

https://blockchain.info/charts/balance?address=14iS2UvcLK33xkC1K1qL1dhEbp49aiNfNp shows the address balance reached ~2200 btc, before he transferred the bitcoin elsewhere.

micromen

sr. member

Activity: 668

Merit: 393

Crypto-Games.net: Multiple Games, Multiple Coins

Maybe it is all a conspiracy, and stunna paid hufflepuff/is hufflepuff so Stunna himself could seem more trustworthy because he paid 2k btc Grin

Havelivi

hero member

Activity: 896

Merit: 1000

Quote from: madonnino on June 29, 2015, 05:44:16 AM

Quote from: micromen on June 29, 2015, 05:41:03 AM

Quote from: Pony789 on June 29, 2015, 05:20:20 AM

Quote from: sherbyspark on June 29, 2015, 05:06:20 AM

Just read the article. Can't the same exploits be made on almost all the sites ?

Maybe, but I would assume Hufflepuff should have also checked the other sites after PD fixed the problem completely and launched the same attack if it is feasible. Until now, I haven't heard of any comparably amazing win on the other sites.

If he is exploiting it on other sites, maybe he is now trying to be more subtile, so they don't notice and fix the flaw? Grin

I agree, I think that in total our dear hufflepuff withdrew far more 'of 2037 btc from primedice, maybe he has exploited other sites...

Hefflepuff played a amazing game there i admire that the Gambling God he/she can destroy any gambling site with this kind of gambling because he has giant bankroll after got paid from primedice i think stunna is the honest admin ever i seen. that article is interesting to read the whole story about the way of gambling what hefflepuff did there.

Topic: Hufflepuff Making 2k BTC On PrimeDice Nov 2014. March 2015 Update: He Cheated - page 4. (Read 49969 times)