no longer relevant, delete topic - page 2.

coin-investor

hero member

Activity: 2814

Merit: 571

Leading Crypto Sports Betting & Casino Platform

Quote from: Bitinity on November 05, 2023, 04:54:55 AM

Quote from: Sunderland on November 03, 2023, 12:23:51 PM

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

They should at least give proof that the bug was reported earlier by another bug bounty hunter and not just say that they know the bug and working on it already, bug bounty hunters will just suspect that they want to take advantage and do not want to pay, a mere thank you is not enough, I don't know much about coding, but based on what I read it consumes time and too much effort just to find bugs.

OP mentioned that he is not expecting big rewards so Betfury should get a hint and reward OP on what they think he deserves, and casinos should create a page or announcement about bugs for transparency purposes, so in case one bug bounty hunter finds one bug he can check the page if there's already a report on the bug.

Bitinity

legendary

Activity: 3052

Merit: 1310

Quote from: Sunderland on November 03, 2023, 12:23:51 PM

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

Lanatsa

hero member

Activity: 2786

Merit: 646

Quote from: ?? on ??

Quote from: bittraffic on November 04, 2023, 10:57:31 AM

How much would it have been if they credited the bounty to OP?
It does need a very meticulous mind to become a bounty hunter and he could have abused these bugs if he wanted to but he reported it. I think its fair to get compensation for it.

Looks like it is hard to understand the images provided by OP but just wanted to say it is good to bring up the subject like this for other casino owners to learn from this kind of situation.

According to these bugs, the reward reaches 50k, but I think this is for very serious reasons. According to my assessment of the bugs found, 4/10.

Where did you get that 50k as a reward? Do they tell you about on that matter or simply you are just making up some assumptions basing up on whats up into your mind?

I do agree into that point above that if the said exploit is really that something serious then it should really be that rewarded considering that you didnt really make out such abuse and for your own benefit
on which means that there are really that those people who doesnt really want to abuse something just because they've been seeing some hole into the system.
Its true that this kind of skills and knowledge isnt that simple and only a few could be able to know it out and this is why it is something that needs up some compensation or reward on the time
that having those kind of discoveries of such possible exploit.

It do really sucks that they wont really be giving out on the reward even if you do see that it is really that worth on getting some reward.
If the said platform had said about that it isnt something that rewardable then it do really sucks big time but well there's nothing we can do about it.

bittraffic

hero member

Activity: 2870

Merit: 612

How much would it have been if they credited the bounty to OP?
It does need a very meticulous mind to become a bounty hunter and he could have abused these bugs if he wanted to but he reported it. I think its fair to get compensation for it.

Looks like it is hard to understand the images provided by OP but just wanted to say it is good to bring up the subject like this for other casino owners to learn from this kind of situation.

coin-investor

hero member

Activity: 2814

Merit: 571

Leading Crypto Sports Betting & Casino Platform

I hope Betfury will address the issue and they will eventually reward OP for his work we seldom read a complaint like this, Betfury is considered one of the top casinos here in the Crypto casino industry, and it will be a big turn-off for bug bounty hunters to read this kind of complaint.
They will prefer to shift to other reputable casinos or just exploit the bug knowing that they will not get anything from their hard work.

An issue like this will spread to bug hunters and coders they will leave Betfury as among the sites to work for bug bounty, I hope Betfury will come down here for an announcement that will satisfy everybody.

aioc

hero member

Activity: 2898

Merit: 567

Quote from: Fivestar4everMVP on November 04, 2023, 06:06:07 AM

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

You have a point bug bounty hunters will choose to do this if platforms like Betfury treat bug bounty hunters like this, yes they offer very high rewards to entice bug bounty hunters but when it comes to payment they are delaying it, some bug bounty hunters are already doing this, because they want to make sure first that they are getting something on their effort.
It is unethical for bug bounty hunters but if they keep doing this they will resort to this, finding bugs is not easy it takes knowledge, skills, and effort to find bugs so they should be rewarded, the platform will benefit if the bugs are fixed.

Coin_trader

copper member

Activity: 2758

Merit: 1163

Leading Crypto Sports Betting & Casino Platform

Quote from: erickbtc on November 03, 2023, 08:52:05 PM

Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

Do you contact already the support? If yes then provide their response to make sure that everything is clear on both side. You should create your topic about your case so that user can follow easily your case if you a real help from the forum. Betfury has a history for altering their referral commission without further notice. Your case is just different because they totally didn’t pay you. I’m interested t see what’s their reason since there’s no way that they will cut you off without doing anything against them.

LOL on BC. they have tons problem here too for not paying some user with their profit. BC also reduce their bonus rewards so I’m sure everything will slow down too on that casino.

GxSTxV

hero member

Activity: 756

Merit: 607

Quote from: markk1 on November 03, 2023, 11:56:44 AM

And now communication with support and screenshots. I sent them an email with a bug report on 10/31/2023 18:12 UTC +2. The rules state that the first response from support will arrive within a maximum of 3 days. 3 days passed, no one answered my letter. As a result, I wrote to the casino website for live support and said that I had not received a response within 3 days. And almost immediately I receive a letter from the casino that they have received my bug report and have only now forwarded it to the appropriate department. Really, the bug reporting department doesn’t check letters often and doesn’t read them right away if they contain important information about bugs? What we have, the report was sent on 10/31/2023 18:12 UTC +2, the bug was still working until approximately 10/31/2023 23:00 UTC +2, I watched this evening for a certain slot, which was the main one for the bug and it was removed approximately this time. Draw conclusions, they don’t want to give fair rewards for finding bugs.

Just like many users here said, It's the risk of bug hunters and to close this case BetFury casino representatives should clear everything about your case and have evidence that someone else reported these bugs before you. I can't say definitely that the casino just doesn't want to pay for your work.
It's only fair if we see a response from the other part. From what you said you are eligible to get paid, In the other hand, It's hard to believe that a casino of thus size will manipulate you and risk their reputation for couple dollars.

Kakmakr

legendary

Activity: 3430

Merit: 1957

Leading Crypto Sports Betting & Casino Platform

You know what you do in instances like this....

You exploit that bug.. until you acquire a lot more money than what they owe you for the reward, then you tell them to send you the reward or you keep the reward and you deposit the balance back to them.

I also reported a bug in a system for another casino and they never gave me a cent... they also say that they knew about the bug, but when I asked them why they did not fix it.... they simply stopped responding. Roll Eyes

Porfirii

legendary

Activity: 1764

Merit: 2032

The Alliance Of Bitcointalk Translators - ENG>SPA

Quote from: Woodie on November 04, 2023, 07:41:23 AM

Quote from: Fivestar4everMVP on November 04, 2023, 06:06:07 AM

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

I have been a bounty hunter, and AFAIK some projects took long to pay because marketing came first , then the sale, and then came the minting of coins depending on the sale and lastly the distribution and most hunters didn't understand this process and wanted to be paid upon the end of the bounty campaign but token sale was not concluded.

Well, this is in part true, but Fivestar4everMVP was right when he said that bounty hunters should we aware that some projects in the forum won't keep to their word in the sense that some of them won't pay bounty hunters at all, not just that they will pay late or when their coin's value has gone down.

Quote from: Woodie on November 04, 2023, 07:41:23 AM

But with bug hunting, these actually need to be treated with the urgency they deserve and seeing they have a dedicated email for such means someone is ready to look into such matters but if they dont honor their side of the deal shows how dishonest they are...besides the least they can do is acknowledge receiving the report to avoid such scam accusations.

I see bug hunting as a dual purpose offer from online services: on one hand, they avoid further exploitation of the bugs found by hunters but, on the other, it is a way to seduce potential black hat hackers so they don't go to the dark side.

Because most people like to think that they are good, and many hackers will prefer to get a lower reward in exchange of keeping their ethics intact. I don't think it is wise to break this powerful unwritten rule from the service side, but they will know what they are doing.

Anyway, as others said before me, it may be too soon to jump to conclusions.

decodx

hero member

Activity: 1414

Merit: 915

🇺🇦 Glory to Ukraine!

I'm really sorry to hear Betfury screwed you over on that bug bounty situation. That's so frustrating when you take the time to find issues and report them, but then they just deny your claim and totally bogus.

Bug hunting should be about working together to make things more secure. Companies ought to stand by their word when they offer bounties. The least they could do is send an email saying they got your report, even if they don't think it qualifies for bounty. Just basic communication and transparency. Thats how you build trust and credibility. Hopefully Betfury hears this and handles it better. They gotta keep a good reputation in the bug hunting world. It's a win-win when bug hunters and companies can help each other. But pulling crap like this hurts everyone.

Woodie

hero member

Activity: 1792

Merit: 871

Rollbit.com ⚔️Crypto Futures

Quote from: Fivestar4everMVP on November 04, 2023, 06:06:07 AM

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

I have been a bounty hunter, and AFAIK some projects took long to pay because marketing came first , then the sale, and then came the minting of coins depending on the sale and lastly the distribution and most hunters didn't understand this process and wanted to be paid upon the end of the bounty campaign but token sale was not concluded.

But with bug hunting, these actually need to be treated with the urgency they deserve and seeing they have a dedicated email for such means someone is ready to look into such matters but if they dont honor their side of the deal shows how dishonest they are...besides the least they can do is acknowledge receiving the report to avoid such scam accusations.

Quote from: Fivestar4everMVP on November 04, 2023, 06:06:07 AM

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

Whitehat hacker, whichever way you look at it you doing a great service for the project as they will nolonger be exploited.

Hamphser

sr. member

Activity: 2436

Merit: 324

Quote from: Fivestar4everMVP on November 04, 2023, 06:06:07 AM

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

If you are really that someone who do really loves on making up some back testing when it comes on finding bugs and exploits then there are lots of bounty sites on which you could really be able to test out your skills. For those who are really that trying out to bypass or making out some checking for some exploits on gambling sites and expecting something like some sort of bounty then it would really be that always better that you should really be talking or discussing if ever there would really be some bounty and not really just trying out to sue or ask our for some payments just because you have found something.
As long a certain site or platform didnt really announce for some bounty program then it would really be your choice because they can anytime ignore or reject out if ever you have find out some bugs or exploits.

This is why if you are really that serious when it comes to bounty hunting or bug tester or exploit then you should approach the site first or the team in speaking about this stuff
if ever you do able to see some holes or exploits then you would really be getting some bounty.Its better to ask out for some clarifications so that you wont be
wasting up your time and effort.

Fivestar4everMVP

legendary

Activity: 2226

Merit: 1049

Leading Crypto Sports Betting & Casino Platform

Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

Saisher

full member

Activity: 2240

Merit: 175

#SWGT PRE-SALE IS LIVE

Quote from: erickbtc on November 03, 2023, 08:52:05 PM

Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

You should If you have all the evidence to back up your claim, you can create a scam report instead of dropping here accusing Betfury of a different issue, this is a bug bounty issue, not a referral issue and your issue is not in any way related to bug bounty and you are promoting another casino here which is off topic from the issue that we are all discussing.

Z390

sr. member

Activity: 714

Merit: 296

Cashback 15%

This is not a scam related issue, take it as a lesson and move on, this is one of the difficulties that bounty hunters used to face.

Firstly, know that you are not the only bounty hunter chasing the bounty, and they have their rules that it's first come first served, if you want to be a successful bounty hunter you need to work harder and faster, to beat other bounty hunters at their time.

I have a friend who is also a bounty hunter who likes finding bugs for companies and projects, he have to join multiple bounties before one or two pay him what he deserved, most times they always fail or some other lucky bounty hunger beat him to the prize with time.

Some platforms are well organized, they always give reasons why they may not pay up even if you find a bug and they will give details on how many bug finders they will pay, so even if 20 hunters are on this maybe only 3 will be selected, this is one of it's disadvantage.

What I believe that Betfury may have some wrong is keeping it to themselves after someone already found a bug, they should have a email alert in place that will notify all the bounty hunters and they will stop working on their bug finding journey.

Agbe

hero member

Activity: 854

Merit: 1246

Quote from: Sunderland on November 03, 2023, 12:23:51 PM

Quote from: markk1 on November 03, 2023, 11:56:44 AM

- snip -

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

You have explained everything well for the op to understand so it is left for him to continuingly asking them to know what is the issue from what he has said and and your explanation, I don't think there is no scam related matter here. And if another user has reported the bug before Op they have to tell that, it has been reported before you. And Op too allow them to make a research (investigation) about the case now that you bringing it to their noticed. Probably you were not the only person submitted it so they have to cross check all.

pinggoki

sr. member

Activity: 1442

Merit: 390

★Bitvest.io★ Play Plinko or Invest!

Quote from: Sunderland on November 03, 2023, 12:23:51 PM

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

Why did they ask for how the bug was found then if they already had done it themselves? Wouldn't they emailed OP that they've already found it and that they were sorry that OP was too late for the report? But in the screenshots of the email, there seems to be no indication that they got to it first or that someone got to it first also your assumption that there's a lot of bug hunter for Betfury isn't absolutely right, what if that's how a lot of other bug hunters think that they didn't bother trying to hunt for Betfury which ends up with Betfury having less hunters than expected.

BitcoinPanther

hero member

Activity: 1918

Merit: 564

Quote from: Stalker22 on November 03, 2023, 04:25:34 PM

OP, did their bug bounty department get back to you after they asked for more details and the exact steps used to recreate the bug? Just because they havent hit you back yet doesnt automatically mean they will reject paying you for finding the bug. They might still be reviewing your bug report. Id give them a bit more time before assuming they are gonna deny your bounty claim. But definitely follow up if its been more than a few days with no response and dont let them ignore you if you put in the work to find a legit bug!

It looks like @OP had a trauma of not getting paid with the discovered bug. @OP stated that the first bug he find was way back six months ago and he was denied of payment. Now he discovered 3 more bugs and informed the casino, and yet @OP feels like the casino won't be paying him again thus he get so eager to make the community in Bitcointalk to know about his case. I would not blame @OP but I agree that it is too early for this thread to accuse Betfury of not paying you again. This may even trigger Betfury to deny you of payment since you breach some condition in their Bug bounty terms.

If ever, Betfury failed to recognized your contribution and failed to pay you, you can always create a topic on the scam accusation board of this forum.

erickbtc

newbie

Activity: 14

Merit: 0

Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

Topic: no longer relevant, delete topic - page 2. (Read 487 times)