[Issue fixed / 27th March] Moon3D is faking their max profit (moon3d.io)

StackGambler

full member

Activity: 434

Merit: 101

YouTuber, gambler, and scam-buster.

Quote from: allo_moon3d on March 26, 2019, 05:55:02 PM

Hello All!

  kxu1005 and I are the operators of Moon3D and we are here to address the “Max Profit” issue above.
Apologies for the slow response, we are not as active on BTCTalk.

  TL;DR -> This was a bug. And it was fixed the same week we were informed!
  
What happened?
Code from our staging server was incorrectly pushed to our production build .

How it happened?
Our staging server runs on Rinkeby ETH. The maxWin was modified on staging server to run tests. The modified maxWin was pushed to the client-side but not correspondingly on the server side. Hence the desync you see in the video!

 How did we address it?
We were informed of this issue (about a week ago), and as part of our weekly updates we pushed a fix 2 nights ago!  

Why we don’t have a Bustabit License?
See this thread!  

@StackGambler: We did not know about this bug 2 months ago (see above), that is false rumor spread by the EC operators. The same people who spam-attacked our website promoting their own games last week.

  @TryNinja: We are still in Beta, we should have an ANN seeding event very soon!  

@RHavar: You built an awesome game man, and we want to pay homage to it! We are adding new variations to the game that we think you’d appreciate too. More stuff to come down the road, so don't write us off just yet. Appreciate it! Grin

Thanks for the reply! I'm glad the issue is fixed.

allo_moon3d

newbie

Activity: 6

Merit: 0

Hello All!

  kxu1005 and I are the operators of Moon3D and we are here to address the “Max Profit” issue above.
Apologies for the slow response, we are not as active on BTCTalk.

  TL;DR -> This was a bug. And it was fixed the same week we were informed!
  
What happened?
Code from our staging server was incorrectly pushed to our production build .

How it happened?
Our staging server runs on Rinkeby ETH. The maxWin was modified on staging server to run tests. The modified maxWin was pushed to the client-side but not correspondingly on the server side. Hence the desync you see in the video!

 How did we address it?
We were informed of this issue (about a week ago), and as part of our weekly updates we pushed a fix 2 nights ago!  

Why we don’t have a Bustabit License?
See this thread!  

@StackGambler: We did not know about this bug 2 months ago (see above), that is false rumor spread by the EC operators. The same people who spam-attacked our website promoting their own games last week.

  @TryNinja: We are still in Beta, we should have an ANN seeding event very soon!  

@RHavar: You built an awesome game man, and we want to pay homage to it! We are adding new variations to the game that we think you’d appreciate too. More stuff to come down the road, so don't write us off just yet. Appreciate it! Grin

RHavar

legendary

Activity: 1463

Merit: 1886

Quote from: StackGambler on March 23, 2019, 08:53:29 PM

Right, I see. I don't see how this can be an innocent bug, as the admin claims. It seems very deliberate. Moreover, the team has apparently known about this "bug" for 2 months, yet they haven't bothered fixing it. It still seems to me that it's a ploy to draw in whales or fake statistics on the site for whatever reason. Thanks for your input, Ryan!

Yeah, it would seem virtually impossible to accidentally add `+35e9` to how you display something. And it's rather obvious it would be out of sync with the server. The only case I could ever imagine making sense is making adding "+1e12" for development so you can see how "Max profit: 1xx ETH" looks (and doesn't overflow or render or something).

StackGambler

full member

Activity: 434

Merit: 101

YouTuber, gambler, and scam-buster.

Quote from: RHavar on March 23, 2019, 08:47:52 PM

Yeah, this confirms they are cheating.

Quote from: StackGambler on March 23, 2019, 06:31:57 PM

https://gyazo.com/59c7349172a908989cdf54a6a998ffca

In that video, the server has a "forced cash out" out at 45.12x. In that round there is a betting of 1.128 ETH, which establishes an upper bound of ( 49.76736 ETH (1.128 * 44.12). In reality it's lower, but I can't be bothered computing all the earlier cashouts) yet them claim it's 75 ETC.

So yeah, no surprise: they're cheating.

Right, I see. I don't see how this can be an innocent bug, as the admin claims. It seems very deliberate. Moreover, the team has apparently known about this "bug" for 2 months, yet they haven't bothered fixing it. It still seems to me that it's a ploy to draw in whales or fake statistics on the site for whatever reason. Thanks for your input, Ryan!

RHavar

legendary

Activity: 1463

Merit: 1886

Yeah, this confirms they are cheating.

Quote from: StackGambler on March 23, 2019, 06:31:57 PM

https://gyazo.com/59c7349172a908989cdf54a6a998ffca

In that video, the server has a "forced cash out" out at 45.12x. In that round there is a betting of 1.128 ETH, which establishes an upper bound of ( 49.76736 ETH (1.128 * 44.12). In reality it's lower, but I can't be bothered computing all the earlier cashouts) yet them claim it's 75 ETC.

So yeah, no surprise: they're cheating.

StackGambler

full member

Activity: 434

Merit: 101

YouTuber, gambler, and scam-buster.

Quote from: RHavar on March 23, 2019, 02:51:35 PM

But the only way to be totally sure would make a huge bet, and see when the auto-cash really works.

But if history is an indication, there's approximately a 100% correlation between people who pirate bustabit code and are dishonest in other ways too...

https://gyazo.com/59c7349172a908989cdf54a6a998ffca

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: Harlot on March 23, 2019, 03:08:38 PM

I think just by this thing is enough for them to earn a negative trust here in the forum if they do have a thread here. This alone only means that they are untrustworthy as said by RHavar as they have stolen the game from Bustabit compared to other websites who have purchased it from them. In my own opinion this is the first red flag for a gambling website who cannot be trusted and should be avoided as you cannot really trust anyone who haven't have a licensed version of Bustabit.

Do they have an account here? I couldn't find one.

Otherwise, this serves just as a warning for possible users as they don't have an ANN thread nor a bttk account.

Harlot

hero member

Activity: 1806

Merit: 672

Quote from: StackGambler on March 23, 2019, 10:25:26 AM

https://www.bustabit.com/license.txt

The site has not paid for a bustabit license and is considered untrustworthy by devans, the owner of bustabit.

I think just by this thing is enough for them to earn a negative trust here in the forum if they do have a thread here. This alone only means that they are untrustworthy as said by RHavar as they have stolen the game from Bustabit compared to other websites who have purchased it from them. In my own opinion this is the first red flag for a gambling website who cannot be trusted and should be avoided as you cannot really trust anyone who haven't have a licensed version of Bustabit.

RHavar

legendary

Activity: 1463

Merit: 1886

The code they use (client-side) is this:

Code:

                    r.textDisplay.maxProfit + " ", r.formatters.Eth(n.maxWin + 35e9) + " ETH"))

to display the max-profit. It's certainly not conclusive proof of cheating (after all: maybe the server knows the real max-profit, but sends it offsetted by -35e9). It seems pretty unlikely to me though.

But the only way to be totally sure would make a huge bet, and see when the auto-cash really works.

But if history is an indication, there's approximately a 100% correlation between people who pirate bustabit code and are dishonest in other ways too...

Avirunes

legendary

Activity: 3094

Merit: 1472

A gambling site trying to fake their max profit and who haven't purchased the license and yet they use it. Do you find such actions trustworthy?

An untrustworthy behaviour/suspicious behaviour always leads to scam IMO.

Check Ponzi for example they pay in the beginning to gain trust but that is no basis to trust them at all.

I tho appreciate you reporting here

StackGambler

full member

Activity: 434

Merit: 101

YouTuber, gambler, and scam-buster.

Issue fixed as of March 27th

https://media.discordapp.net/attachments/460311160181358592/559031068213116928/unknown.png?width=767&height=181

As you can see in the screenshot about, the max profit displayed on Moon3D's site is 75 ETH, but the max win showing in the web console is only 40 ETH.

https://etherscan.io/address/0x0e82d5f31b9db09723dc8a91068a43c73d7de35d

Their hot wallet has not processed any large withdrawals or deposits recently, even though several players on the site have supposedly won hundreds of ETH.

https://www.bustabit.com/license.txt

The site has not paid for a bustabit license and is considered untrustworthy by devans, the owner of bustabit.

https://gyazo.com/59c7349172a908989cdf54a6a998ffca

Finally, you can see here that a player was cashed out at a lower max profit than displayed on the site.

Conclusions:

a) Moon3D does not have the bankroll they claim to have
AND/OR
b) Moon3D is displaying a fake max profit on the site to entice high rollers but not actually payout 75 ETH wins
AND/OR
c) Moon3D is faking both game volume and big winners using site bots who aren't real players

Please note that despite all of this, I do not think Moon3D is a scam. They have been very kind in their dealings with me and I have withdrawn from their site without a problem. I just feel that the community should be aware of them faking the max profit, and high rollers are advised not to play there for the time being. I hope this is resolved soon.

Topic: [Issue fixed / 27th March] Moon3D is faking their max profit (moon3d.io) (Read 270 times)