- Do you still have remaining money from that?
- Did it crossed to your mind of returning the money and/or felt any guilt on what you did?
- Did you reinvest it? If yes, to which?
- Are you retired because of that money?
- How can you prove that you actually have taken millions with that exploit? Since it's the hardest part of the question, I wonder how can you.
Main question: How was the exploit performed?
The casino used provably fair dice game. They were about to release new version for their site, before release they had separate beta website for small group of players to test and look for bugs before the final version would be released. I was one of those players who got access to the beta testing site. Finally the testing period was over and new version of the site was released to the public. The beta site was still online. The mistake that the casino made was that beta site account and main public site were sharing identical server seed. Meaning that i could reveal the server seed on the beta website while still having it active unrevealed on the main site. The way probably fair works is that with revealed server seed i could calculate all the future dice rolls before they would happen. And thats what i did. I did it for over 2 months i believe. I abused it in a way where it really looked like at the end i was just getting lucky and that the EV would catch up in the end. Over 2 month + period i was withdrawing big amounts in btc totalling thousands of bitcoins overall.
1. I still have majority of thay money.
2. I never felt guilt or wanted to return the money. Casino is a very shady business and the owners of these platforms dont care about their players or their losses and will do anything to milk their customers out of their last dollar. So i feel no sympathy. I outplayed them at their own game.
3. I did diversify my btc investment
4. Yes i am
5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do
That makes sense and you don't have to sign the wallet just to prove it. I've read more than enough explanation and that already gave me an idea on how it went. Someone who's going to make a story without a sense won't waste his time answering these questions. While everyone is starting to give the idea on what this casino was and the clues are there.
One question. Do you still see the site around?
I think that he still sees it.
It was not ethical in the sense that you were a close group and you were trusted by the dev team to help them. When you saw the hole, you were supposed to inform the management about it. Anyway, ethics does not have a fix rules book. The standard varies from individual to individual.
I agree, he's chosen to be part of the beta testing group and should have told the holes that have remained. But then, that's him. Anyway, I appreciate him answering all of my questions and have told the story on how it went.