Topic: Introducing LitecoinLottery.net - A simple lottery with up to 95x payouts (Read 1456 times)

bump

bump.

16 coins left for the 50LTC lottery!

"impossible" is too strong. The attack can happen by analysis of the previous games, supposing there is a good amount of them a person can estimate how long it takes for all tickets to be sold. Suppose it takes N minutes at average, and since 1 confirmation is relatively fast with Litecoins, the total time required for a draw is just a bit more than N (2 to 5 minutes, lets say). Then, to simplify things, suppose your drawing happens like this one (the seeds you are using are exactly the ones in the following code, it is the standard one used in case you don't give other one):


If the person estimated N well enough, then he can do the following:


Note that this is a "relatively" theoretical attack, since it is checking against the unknown seed. For the purposes of this test, for the first piece of code I got the numbers 38 88 12. Which I managed to replicate in the bottom code by brute forcing the seed. If you run this code, it is not guaranteed that it will always find the correct seed, although it does very often in my machine (copy & paste both pieces to the same .py and run). The important thing to take from this is that using the current time as the seed is too weak.

Now your question regarding the provably fair part: you could use the very own blockchain for that. Consider the hash of m blocks;  apply simple operations like XORing the hashes, and finally pick the winners from there. The XOR is to make it harder for the case where mining pools discard blocks on purpose to change the outcome of the lottery in their favour (this another "relatively" theoretical attack, but doable). I figure this might require a longer and more detailed explanation, but I'm not sure if you even plan on using a method based on this so I'm saving my time

The lottery is happening once all deposits reach 1 confirmation, which varies depending on network speed. So a timing attack is impossible.

We are currently working on a method to show the lottery is provably fair. How would you suggest doing this with a random drawing?

There are two issues: 1) it is not provably fair. 2) if you are using everything standard, then the PRNG is being seeded with the current time. The second issue makes it a lot easier for an attacker to determine what will be the outcome of your lottery.

Sorry about the server error, that should be resolved now.

Each deposit address is added to an array according to however many deposits that address has made. We use the standard random python library to pick the first place winner, then remove that one instance of the address from the array. We then run the array against the python library for the second place winner and the same process for the third place winner.

while we may revise this process over time, we have not found any issues operating in this fashion. Users with multiple deposits have a chance to keep winning.

all of this logic happens once the 25th, 50th, or 100th coin is deposited and after all deposits reach 1 confirmation

*edit*

that's whats happening right now.

There seems to be some server side issue (error 502). But, can you clarify your method for picking the ``3 winning tickets at random'' ? I didn't see it written in the page or in your post.

Congrats!

We are working on some better stats today. Going to show the progress of each lottery on the right side under the buttons. A few other minor things too.

Won second place, so the system appears to work! Can't wait for the next game to end. I don't really understand why these sorts of games are not more popular..

Only a few coins away from the next 25 LTC lottery. Looks like we've got some coins in the 100 and 50 lotteries as well!

If anyone has anymore suggestions, please feel free to leave them here.

Sounds good. I will sprinkle some seed to see if we can roll the ball!

Sorry about that.

We will roll in any late bets before anyone is allowed to deposit for the next round. This will allow the system to catch up before allowing anyone new to deposit.

for now, please refresh the page before you send. working on this now.

Received, thanks! Interested in progress and hopefully some bets roll in.

Ok will send back to that address.

We are working on a solution for this now. If a deposit is made after the current round, the coins will be rolled in to the next round.

LUFiqXjn11LNpXvhRi8NN7rjSLBcUH4kEQ

This works.

That presents a very fundamental flaw in the game - coin can too easily be lost. It needs to be buffered to the next game or this will be an absolutely chronic issue if you have any volume.

Did you send to the 25 LTC lotto? Let me check it out, just a moment.

*edit* OK, I see there is an extra 10LTC. You must have sent it at the same time as someone else. I will return the coins to you, is the wallet in your signature ok?

Alright, so when I refreshed I saw 15 LTC. So I opened my LTC wallet, but by the time it synced the game had ended I suppose, but I sent 10 LTC. I had generated the address to deposit I suppose sometime right before the block hit the blockchain, ending that game (2 seconds after sending, I checked the game page, but it had ended.

What happens when more than 25 LTC are sent to the 25 LTC game?

I do not see that 10 LTC (7 confs) confirmed anywhere. Did it somehow slide into the last game? If so, I immediately find the lack of a "sheet of entry" a bit troublesome. Is it plausible that after the game is done, you can submit data showing the entries from X addresses? As it is, I can't tell where my LTC is.

There is a 25 LTC lottery running now. Once all deposits have 1 confirmation, the winners are picked and payouts are sent.

And yes, we have tested each lottery with real coins.

I'm pleased to see the first lottery is running. Thanks guys and good luck!

Also, I am guessing the previous "winners" are test runs?