Topic: I've Made Millions abusing Exploit in a Crypto Casino - AMA - page 8. (Read 1756 times)

Bit777, 777coin, crypto-games . net ...  

Ja,,,, Fortunejack binary trading very good very nice ! 

I was thinking the site might be luckyb.it for a second as there were a few of us that had private access to test dice for their launch, but LB didn't launch dice in 2014, more like 2019-2020.

@OP is the site reputable? 2014 there weren't a ton of dice sites around. Bitsler, fortunejack, primedice, 999dice, satoshi dice, maybe some apps on moneypot.

If he sign a message with stolen coins it would be the most dumb move of 2024...

What i don't get is how they used the same seed, it has sense that you were able to exploit it if you could predict the outcome of the next bets, but as a developer, i could say that seed should be generated in a random way.

My question is:

Why didn't you report the bug if you were there as a tester?


I can answer this one. Most of the provably fair sites works the next way:

You take the "Server seed" then "nonce" and the "user seed", then make a sha256, then take the last 4 digits, and that's the result of the roll. But people can't do it because the server seed is secret.

you mentioned that the casino has a dice game, was it primedice.com or pocketdice.io? they are the only dice casinos I know that were popular at that time.

how do you calculate future dice rolls from a revealed server seed?

 2014 you say !




 This might be not necessary a hack, some times it can be there some (maneuvers) that bugs/cancels requirements for unlocking bonuses (that can be huge) ! ..  And the anonymity over crypto-casinos facilitate exploiting that bugs near unlimitedelly.

 Sometimes that bugs are too simple lets serious suspicions over that they are actually inside job! In way, someone from inside have made it to be able to profit from it anonymously.  The way that there are no technical maneuvers needed or that it can look like just a very gross mistake is just to blur hints over who's the instigator!

 
 In anyway in the case of just miss coding/ bug from the casino, I don't really see them go contacting journalists to talk about it ! 

If you have ahy details that you have used before like a wallet for example and you still have access to it then maybe your old can recovered. Anyway, don't mind me asking but did the casino found out about you found a major exploit that lets you earn lots of money?. Did they also able to fix it?. Not that I care about the casino but what's your goal or aim here sharing to everyone that you found a major exploit in a casino?.

I thought this was like Jimmy Zhong when he discovered something that he exploited on a website when withdrawing and double-clicking it or something.

To prove that you own those coins, you should sign them with a wallet that contains your coins. That's the only way.

Few questions for you;

• Is the site still operational up till this day?
• Did they ever suspect your account and block it?
• If the answer to 1 is "yes" and 2 is "No", can you still access your account in the site?

It was not bustabit, however bustabit did have plenty of bugs back in the day

I am clarifying again that I did not create this thread to benefit financially in anyway from any user nor i have any ill intentions.


I will start answering questions, without revealing too much on who I am and which casino the exploit took place in.



Main question: How was the exploit performed?

The casino used provably fair dice game. They were about to release new version for their site, before release they had separate beta website for small group of players to test and look for bugs before the final version would be released. I was one of those players who got access to the beta testing site. Finally the testing period was over and new version of the site was released to the public. The beta site was still online. The mistake that the casino made was that beta site account and main public site were sharing identical server seed. Meaning that i could reveal the server seed on the beta website while still having it active unrevealed on the main site. The way probably fair works is that with revealed server seed i could calculate all the future dice rolls before they would happen. And thats what i did. I did it for over 2 months i believe. I abused it in a way where it really looked like at the end i was just getting lucky and that the EV would catch up in the end. Over 2 month + period i was withdrawing big amounts in btc totalling thousands of bitcoins overall.


1. I still have majority of thay money.
2. I never felt guilt or wanted to return the money. Casino is a very shady business and the owners of these platforms dont care about their players or their losses and will do anything to milk their customers out of their last dollar. So i feel no sympathy. I outplayed them at their own game.
3. I did diversify my btc investment
4. Yes i am
5. I could sign wallet containing good chunk of those coins but I wouldnt say that would be the smartest thing to do

At a point i wanted to waste time listening to the ops but i realize that the thread content is full of bullshit that i fine hard to believe or even trust the ops in any ways, since I am not looking for any bug to abuse any casino because most importantly is the ability to make such abuse without being caught by the casino, even if there is any bug in the system, it won't still add up before the casino will discover the bug and for that possibility, we need to avoid any service that promises any form of possibilities of that happening.


I don't know why anyone would want to take such a risk in terms of betting with the mindset that you can abuse a system even though there is a possibility or incident leading to that or making that possibility happen.

Do you talk about Bustabit? I am curious because I have heard that bustabit.com in 2014 had bug where you were always winning at 1.01%, it was the lowest crash. Were you using that bag to bet many bitcoins and profit? If this is true, then when you say that you made millions, did you made millions in 2014 or what you earned back then is more than a million today because of bitcoin's price?
I will be glad if you share the name of casino and the way you abused their system, you are anonymous, so I assume you are safe.

He came from nowhere and stated something about his old account, or at least he provided proof, right? And for the so-called explotation, what he said is just a bluff until he provides evidence; it's easier to say than to prove. Even I can say that I gained millions of dollars exploding a crypto casino, but where is my proof? So it's clear that OP is bluffing, maybe just to attract people to notice him and boost his account. You can see from his engagement that he is clearly a new user or account. And even if it's true, then why are you still here, right? You should not be in this forum if you have something as big as millions of dollars. I don't know why many users here are creating such a bluff story just to create a topic and be noticed. Little do they know, people here are not easily convinced or fooled.

Are you in search of disciples to your course and I guess this ain't free as you are gonna request they pay some token for the so-called secret you want to expose to their knowledge.  Hey guy, wake up, this is 2024 not 2014, a lot has happened and bluffs like this to attract naive users has died out. There am many acceptable ways to make profit online in the forum  and maybe you need to check the service board to know where your legit service may be of profound value to you than casino abuse.

So far you haven't dropped anything that will make us believe this is true, there's been so many questions now but no answer if you're someone that good at what you claimed then you should post screenshots, articles, or backstory that will prove how good you are, anyone can sign up here and claim that they've made millions doing something, for all, we know you're just a beggar living in a fantasy and using this forum as your platform in your fantasy and trying to build his reputation so cut the crap and drop all proofs that you've got.

I do not think OP would use his or her real account for such advert here as this post looks so awkward.  OP knows the gravity of this post he or she has made and would not take the risk of revealing his or her identity to the public. So coming up with a quick story losing or unable to access the original account would need OP response. This type of situations are very sensitive because of the amount and manner at which it was gotten. If OP had used his or her real account,  I believe by now OPs real identity would have been revealed and possibly the casino might likely be identified.

I am a bit of a pessimist so I would have to say that that sounds like a fib without any evidence. Although it may very well be true.  Lucky for us, there is a simple way to know. You can tell us exactly how you did it. If the exploit no longer works, then there is no disadvantage of making it public, right? And since you already have your money, you don't need to worry about your funds and/or casino account being frozen.

I personally would love to know more about early casino exploits and how casinos have changed over time. I assume that you targeted brand new casinos that were just starting out in an experimental fashion.

• Do you still have remaining money from that?
• Did it crossed to your mind of returning the money and/or felt any guilt on what you did?
• Did you reinvest it? If yes, to which?
• Are you retired because of that money?
• How can you prove that you actually have taken millions with that exploit? Since it's the hardest part of the question, I wonder how can you.

He's not referring to the forum ban I think, instead what heeant was about his initial taste on the casinos, yet claiming here with us that he have violated some of their ethics 2joch make him to earn that much he had them, that's why you couldn't hear him made mention of the casino he used or make reference to any of the past experience, we can choose to believe or not.

Ten years back, when Bitcoin was still finding its feet, there likely weren't many crypto casinos around.  Perhaps a handful at most.  So if someone really managed to game one of those early operators for a big payout, I'd expect there to be some kind of record.  Even a forum post or chat log recounting the tale and  it would be quite a feat to pull off. 

Without further proof the claim does seem rather dubious.  But who knows, maybe this person did get lucky and slip through the cracks before the casinos wisened up.  Stranger things have happened in those early cowboy days of crypto.  Still, extraordinary claims require at least some evidence to back them up.  Otherwise, it's all just talk.