Author

Topic: no longer relevant, delete topic (Read 487 times)

copper member
Activity: 61
Merit: 3
Social i-Gaming Crypto platform with BTC dividends
November 09, 2023, 10:25:47 AM
#55
Dear, user!

Thank you for your patience as we reviewed your case. We want to assure you that our investigation into your situation has been conducted thoroughly, and we are committed to providing you with a clear understanding of the current circumstances.

Regarding the Bug Bounty bonus, BetFury has made a resolute decision to decline the issuance of the reward. Our decision is grounded in substantial reasons, and we stand firmly by it.

First and foremost, our investigation revealed that multiple accounts were registered with what appears to be the intent of exploiting the bug you subsequently reported. It's noteworthy that transactions across these various accounts were halted on Tuesday night, the 31st of October, whereas your bug report was submitted on the same evening. This sequence of events has led us to conclude that the report was made after transactions were frozen, possibly with the intent to derive an advantage from the situation by reporting the same bug that was utilized.

Furthermore, it is crucial to clarify that the removal of the slot from the Welcome Pack on Tuesday evening was a proactive measure undertaken at the explicit request of the Risk Department. This action occurred prior to our receipt of your report and was part of our internal testing procedures. The timing may have created the impression that it was taken down after your report, which is not the case. It was purely coincidental timing.

In addition to the aforementioned reasons, our investigation also uncovered that you managed to withdraw funds obtained through a drawback in the slot machine. We take this matter seriously, and appropriate action has been taken to address this issue.

We trust that this explanation provides a comprehensive understanding of the situation, and we stand firmly by our decision. If you have any further inquiries or require additional clarification, please do not hesitate to reach out to us.

Thank you for your continued engagement with BetFury.

Sincerely,
BetFury team.
full member
Activity: 448
Merit: 117
November 08, 2023, 08:32:51 AM
#54
I no longer expect a positive decision in my favor regarding the case. Let the topic remain and people continue to discuss it. We could have found a solution to the situation from the very beginning and everyone would have remained in a situation beneficial to him, but alas, betfury is principled. I also wrote a review on truspilot. By the way, betfury has a lot of recent negative reviews in trustpilot with a minimum rating of 1.
I am not sure if TrustPilot reviews would affect them or not since most people know that the reviews and the trust score on TrustPilot are easily manipulated by competitors or even users that rage and become angry after losing money. So maybe you should try something else, maybe open a Scam Accusation thread in this forum and see if that helps your cause in any way.
Trust pilot review these days are beginning to look fishy and not genuine as it is already known that they manipulate reviews and most times, they do delete peoples replies and review on their experiences with most of their products they present on their website. But that is not the case here as reviews gotten here are genuine and reliable.

Maybe a scam accusations here would make them sit up and doing as it relates to services rendered. If OP should open a scam accusations against them, people here would be very much alert and informed so as not to fall victim from their ill act because if they can do such to OP then it means they can do much more than that to their members so therefore I would advise anyone dealing with the casino to be extremely careful.
sr. member
Activity: 2436
Merit: 324
November 08, 2023, 07:45:16 AM
#53

I did not share the bugs with anyone, I gave an answer about this above. Only after the bounty was rejected I created this topic.

I wrote to several managers and the main support person in telegram - everyone ignores me and doesn’t answer anything about this case.
Apparently they don’t want to do anything about it, just ignore it and wait for everything to be forgotten.


Would you mind on giving us out some hint if this kind of exploit does really have that chance on getting money on using out that kind of hole?
If it does then it is really that worth for some bounty but much sure that they had already fixed that and they could easily ignore you out.
If your intents are real and sharing up something honestly or something that do talks about finding up some issues that could result into huge damage
then it would really be just that right that he should compensated with it.

Betfury doesnt have a word on this one. Is it possible that they could make out some response on the thread that you have created?
Let them know so that at least we do able to hear out their side also.

Yes, you could make money using the bugs I found. But they probably don’t work anymore. I didn’t check them again after filing a bug report.
There are also variations of bugs with bonuses, but I have not checked them. Maybe I’ll check it later, but I don’t want to at the moment.
After you had reported about such bug and seeing basing on the responses that they had made then it is really just that simply that not that convincing. As if they are really that trying to avoid out and not really that totally been saying that they had fixed out the issues but rather they do really make out some alibis on giving up some more time on checking it out but eventualyl they had already patched it up or already been fix.
I dont know if they are really that showing some unprofessionalism on here in regarding the situation and just like on what said above that it is something that worthy of a bounty
but since they are the ones who do make out such rule about for not on being that a huge problem then they wont really be giving out any bounties into that.
Why not really just simply move forward and continue on finding out some exploits or leaks on other sites on which they do really give out some bounties or rewards.
hero member
Activity: 2996
Merit: 609
November 07, 2023, 04:27:49 PM
#52

I did not share the bugs with anyone, I gave an answer about this above. Only after the bounty was rejected I created this topic.

I wrote to several managers and the main support person in telegram - everyone ignores me and doesn’t answer anything about this case.
Apparently they don’t want to do anything about it, just ignore it and wait for everything to be forgotten.


Would you mind on giving us out some hint if this kind of exploit does really have that chance on getting money on using out that kind of hole?
If it does then it is really that worth for some bounty but much sure that they had already fixed that and they could easily ignore you out.
If your intents are real and sharing up something honestly or something that do talks about finding up some issues that could result into huge damage
then it would really be just that right that he should compensated with it.

Betfury doesnt have a word on this one. Is it possible that they could make out some response on the thread that you have created?
Let them know so that at least we do able to hear out their side also.
legendary
Activity: 2226
Merit: 1049
Leading Crypto Sports Betting & Casino Platform
November 07, 2023, 03:56:56 PM
#51
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.
If this is actually Thier long standing rule, then you've ruin your chances of getting any dime should they have considered to reward you already... I'm afraid but that's the truth here..

secondly, I feel an official statement wasn't made regarding Thier denial and failure to remit the said funds for any irregular bug findings- the question is; why were you in a hurry??

Sandra 🧑‍🦰
Wait, did op share the bug he discovered on the internet? As well as this forum.? I thought he only brought the issue here as he was certain that the BetFury team aren't or weren't going to pay him for his discovery, why should we turn around and blame him now?

Anyways, I personally will not blame either party, since betfury team haven't said anything concerning the issue, but then, on the other hand, this is not the first time I am coming across an accusation like this, there are have several instances where some online companies fail to honor their word promise of rewarding any user who discovers a bug in their system and report it, OPs situation is not the first, and neither will it be the last, I have already said what I would do if I ever get in this same situation.
hero member
Activity: 714
Merit: 1004
Goodnight, ohh Leo!!! 🦅
November 07, 2023, 03:46:18 PM
#50
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.
If this is actually Thier long standing rule, then you've ruin your chances of getting any dime should they have considered to reward you already... I'm afraid but that's the truth here..

secondly, I feel an official statement wasn't made regarding Thier denial and failure to remit the said funds for any irregular bug findings- the question is; why were you in a hurry??

Sandra 🧑‍🦰
hero member
Activity: 2492
Merit: 586
November 07, 2023, 01:23:02 PM
#49
I no longer expect a positive decision in my favor regarding the case. Let the topic remain and people continue to discuss it. We could have found a solution to the situation from the very beginning and everyone would have remained in a situation beneficial to him, but alas, betfury is principled. I also wrote a review on truspilot. By the way, betfury has a lot of recent negative reviews in trustpilot with a minimum rating of 1.
I am not sure if TrustPilot reviews would affect them or not since most people know that the reviews and the trust score on TrustPilot are easily manipulated by competitors or even users that rage and become angry after losing money. So maybe you should try something else, maybe open a Scam Accusation thread in this forum and see if that helps your cause in any way. I don't know what's wrong in all this but if you actually found a bug and they had a bug bounty, they should have given you the bounty for doing that instead of dragging it this much.

However, we can't say anything or make any judgements considering the fact that we have only heard or seen one side of the story and they are yet to make an appearance and explain themselves for this, that is when we can reach a conclusion about who is right and who is wrong, we can only wait for now, I guess.
legendary
Activity: 3192
Merit: 1198
Bons.io Telegram Casino
November 07, 2023, 09:07:56 AM
#48


I was not provided with proof that certain accounts belonged to me, they only assumed. Everything I wrote above is true and my last test was done that morning and I didn’t do anything else or check for bugs.
I provided them with the details of the account from which I made the bug. As a result, the account was banned and there is now no more response from support.

I wonder if this is an isolated case, and have they paid other bounty hunters I checked their bug bounty page and these are part of  what is written on their page

Quote
Report Closure
⚠️ If a user discovers a vulnerability, he should not use it. We ask the researcher to give us a reasonable opportunity to resolve the issue before making it public.

If they can give proof of your abuse then there is a violation of their terms but if not it's bad for their image, since BFG protects the integrity of their system it becomes a he says they say scenario, and it's up to the readers to discern the truth based on the pieces of evidence presented here.
legendary
Activity: 3192
Merit: 1198
Bons.io Telegram Casino
November 07, 2023, 06:24:20 AM
#47


Yes, I don't understand them. Also, they still have not given an answer to one bug. The last message from the department contained the following: after careful deliberation and investigation, we regret to inform you that we can't grant a reward for your reports.

This is very unfortunate, can you upload the screenshot of that particular message and do they have a valid alibi as to why they cannot grant you a reward, many bug hunters will be reading this thread and they will have second thoughts about reporting the bug and may lead to just exploiting the bug since reporting will not get them anything.

There are whitehacker and bug bounty forums and communities and this news could escalate, if they are not going to reward they should be transparent in saying why they would not and not give you a generic response.

I wrote them everything as is, did the last test in the slot and went to bed in the morning. Only in the evening wrote them a bug report. I didn’t do any more tests after that morning.



So what is this they are now accusing you of abusing and withdrawing funds coming from different accounts, can you address this one did you withdraw from
accounts that they are accusing you of, based on how they configured their words they are not sure if you are the one withdrawing, it's still not good if they are not sure of and still accuse you of wrongdoing, they did not pay you then they accuse you not good for Betfury's public image.
legendary
Activity: 2842
Merit: 2016
November 06, 2023, 10:10:21 PM
#46
Thank you! Yes, I will write news about my case here and the topic will never be closed. I think the betfury acted very unfairly towards me! Again, please note that I am not asking for mountains of gold from betfury. I will be satisfied with an adequate reward or any offer from them. For example, I offered them my knowledge in the casino and that they would hire me as a bug searcher and tester. My active experience in casinos is more than 12 years. Therefore, do not be surprised how I found the logic of the system and quite quickly solved the problem of bypassing certain algorithms and found several bugs in the system.

It's worth noting that Betfury's developers have always preferred anonymity. So I doubt that they will hire a person they don't know very well.
By the way, have you tried to take part in any other bug bounty programs before, or Betfury's bug program was your first experience? My point is that next time, you should be sure to record all the necessary information about bugs you find before sending a report to the project developers.
copper member
Activity: 1988
Merit: 905
Part of AOBT - English Translator to Indonesia
November 06, 2023, 09:39:05 PM
#45
So betfury didn't pay the bounty is the bug unlimited i mean is it crucial they should pay or you can turn yourself into blackhat hacker and then tuen the money when the news is all over the place with the proof that they didnt care about your previous email.

Back year ago my friend found bug that contains database of user in token project and they only give us couple of buck worth of their token maybe 10$ what a joke
full member
Activity: 2366
Merit: 207
★Bitvest.io★ Play Plinko or Invest!
November 06, 2023, 09:14:45 PM
#44


Yes, I don't understand them. Also, they still have not given an answer to one bug. The last message from the department contained the following: after careful deliberation and investigation, we regret to inform you that we can't grant a reward for your reports.

This is very unfortunate, can you upload the screenshot of that particular message and do they have a valid alibi as to why they cannot grant you a reward, many bug hunters will be reading this thread and they will have second thoughts about reporting the bug and may lead to just exploiting the bug since reporting will not get them anything.

There are whitehacker and bug bounty forums and communities and this news could escalate, if they are not going to reward they should be transparent in saying why they would not and not give you a generic response.

I wrote them everything as is, did the last test in the slot and went to bed in the morning. Only in the evening wrote them a bug report. I didn’t do any more tests after that morning.


You have all valid arguments and documentation so I do believe that the team are looking into your case and hoping that will be resolved sooner as this post running to a week now and the case as same .
Please do update everything here mate as I am also one of old player in Betfury and never encountered a single problem in my time of playing in the past (as I stopped playing because of limit in budgeting)
legendary
Activity: 3192
Merit: 1198
Bons.io Telegram Casino
November 06, 2023, 07:18:17 PM
#43


Yes, I don't understand them. Also, they still have not given an answer to one bug. The last message from the department contained the following: after careful deliberation and investigation, we regret to inform you that we can't grant a reward for your reports.

This is very unfortunate, can you upload the screenshot of that particular message and do they have a valid alibi as to why they cannot grant you a reward, many bug hunters will be reading this thread and they will have second thoughts about reporting the bug and may lead to just exploiting the bug since reporting will not get them anything.

There are whitehacker and bug bounty forums and communities and this news could escalate, if they are not going to reward they should be transparent in saying why they would not and not give you a generic response.
legendary
Activity: 2184
Merit: 1575
Do not die for Putin
November 06, 2023, 06:52:39 PM
#42
It is very sad to hear that a bounty is not paid, particularly on white hat bug-finding because it really encourages people to actually not ever report and even take advantage of the bugs found which can even be a problem for the site and other users. Make sure that any reputation concern is stated in the forum, because if more people say the same it means something is not right.
full member
Activity: 448
Merit: 117
November 06, 2023, 06:29:03 PM
#41
It’s strange to me that betfury doesn’t do anything and doesn’t try to resolve the case. I wrote to various managers and other people who run betfury and there was no response.

I found out in live support why there was no response to the case, they replied that the corresponding department had the weekend.

OP I think it was weekend as they have said so it would be okay to give them a benefit of doubt if truly they would act after the weekend then if they fail to respond them we  can conclude but for now let it be on assumptions that they are still on weekends. Although I have read your post and it is not making any sense that they could not attend to you for helping them to find such bug on their casino. It is awful of them to have acted this way.  I will call for your patience just for a little more time let us see how they handle the situation.

I would like to believe that they will still meet me halfway. I generally like the betfury community, but in this case they have treated me dishonestly at the moment.

Well that's up for them if they didn't treat you fairly even if you settle up some things regarding on the bug you pointed out to them and if they don't really pay then didn't give a feedback or clear out such issue on this thread then maybe this will be the reason on why many people would lost their trust to them. They should really pay the bounty if there's promise stated to you and if this issue will prolong for another week or more then best to post a scam accusation for not honoring your deal between BFG team so that many could probably see your issue with them.

But still its good for them to settle.up and fix the bugs so that their gamblers will be more safe at away for any issues that might happen to them.

I believe that they as a casino should take it up as a responsibility to reward bug hunters wether there is a bounty or not because I see that it is not an easy task to take out time to spot a bug on a casino which would be able to cause such casino a huge fortune. Bugs are not just what should be overlooked after discovery because hackers are out there looking for porous victims to get at so therefore it is pertinent that bug discoverers be rewarded handsomely to commiserate with their services rendered.
legendary
Activity: 2520
Merit: 2853
Top Crypto Casino
November 05, 2023, 06:59:27 PM
#40
The fact that they didn't respond to your report immediately says a lot!
According to what you have said, those are critical vulnerabilities since they allow attackers to withdraw money. They should have taken your reports more seriously.
Saying that they didn't reply because it's the holydays is not an excuse, tbh. They should state in their bug bounty terms that you should expect to receive a response within three working days.
hero member
Activity: 2520
Merit: 783
November 05, 2023, 06:29:48 PM
#39
It’s strange to me that betfury doesn’t do anything and doesn’t try to resolve the case. I wrote to various managers and other people who run betfury and there was no response.

I found out in live support why there was no response to the case, they replied that the corresponding department had the weekend.

OP I think it was weekend as they have said so it would be okay to give them a benefit of doubt if truly they would act after the weekend then if they fail to respond them we  can conclude but for now let it be on assumptions that they are still on weekends. Although I have read your post and it is not making any sense that they could not attend to you for helping them to find such bug on their casino. It is awful of them to have acted this way.  I will call for your patience just for a little more time let us see how they handle the situation.

I would like to believe that they will still meet me halfway. I generally like the betfury community, but in this case they have treated me dishonestly at the moment.

Well that's up for them if they didn't treat you fairly even if you settle up some things regarding on the bug you pointed out to them and if they don't really pay then didn't give a feedback or clear out such issue on this thread then maybe this will be the reason on why many people would lost their trust to them. They should really pay the bounty if there's promise stated to you and if this issue will prolong for another week or more then best to post a scam accusation for not honoring your deal between BFG team so that many could probably see your issue with them.

But still its good for them to settle.up and fix the bugs so that their gamblers will be more safe at away for any issues that might happen to them.
full member
Activity: 448
Merit: 117
November 05, 2023, 04:56:36 PM
#38
It’s strange to me that betfury doesn’t do anything and doesn’t try to resolve the case. I wrote to various managers and other people who run betfury and there was no response.

I found out in live support why there was no response to the case, they replied that the corresponding department had the weekend.

OP I think it was weekend as they have said so it would be okay to give them a benefit of doubt if truly they would act after the weekend then if they fail to respond them we  can conclude but for now let it be on assumptions that they are still on weekends. Although I have read your post and it is not making any sense that they could not attend to you for helping them to find such bug on their casino. It is awful of them to have acted this way.  I will call for your patience just for a little more time let us see how they handle the situation.
legendary
Activity: 2296
Merit: 1335
Defend Bitcoin and its PoW: bitcoincleanup.com
November 05, 2023, 03:14:00 PM
#37
They are also looking for reasons not to count my report, for example: they claim that I submitted an application with a bug report more than 12 hours after my last check. I did the last test of the bug around 05:30 UTC +2 in the morning and went to bed until 15:00 UTC +2. I went about my business at home for an hour. It took me about 2 hours to prepare the bug report. The bug report was sent on the same day in the evening at 18:12 UTC +2. After the last test in the morning, I did not do any more tests in the interval of 12 hours. I wrote in telegram https://telegram.me/Steve_Betfury (head of betfury support) that I sent a rather serious bug report to bug and bounty support. Almost immediately after the report was sent, it was written to live support that I had sent a bug report from a certain email and they should check it, to which the first response was received to my report within three days. And betfury is trying to blame me for sending a bug report only 12 hours after the last test.
IMO this should not matter. What matters is if the bug was still there at the moment of submission. If it was, they should pay the bounty, or if there were multiple reports sent at the same time, a partial reward. I used to work in support and the way I'd handle this is as follows:
If your report was long after another report for the same bug and that first report went to a technician that's in the process of fixing the bug, I'd give you a redacted copy of that first report that included all the dates as proof that you were late.
If your report was sent at the same time (like within 1 hour) of another report by someone else, and both reports were sent before the technician was able to fix the bug, I'd either decide to share the bounty between you two, or pay something like 75% to the person who first reported it and the rest to you.

It's obvious to me they're not trying to handle it the right way and don't care about transparency.
hero member
Activity: 2716
Merit: 588
November 05, 2023, 07:55:11 AM
#36
So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

They should at least give proof that the bug was reported earlier by another bug bounty hunter and not just say that they know the bug and working on it already, bug bounty hunters will just suspect that they want to take advantage and do not want to pay, a mere thank you is not enough, I don't know much about coding, but based on what I read it consumes time and too much effort just to find bugs.

OP mentioned that he is not expecting big rewards so Betfury should get a hint and reward OP on what they think he deserves, and casinos should create a page or announcement about bugs for transparency purposes, so in case one bug bounty hunter finds one bug he can check the page if there's already a report on the bug.

That is true, should have valid proof about such claim, or better yet, they need to be clear about the rules of their bug bounty program.
Because if that is the case, then, you don't know if someone already reported such bug to them or not yet.
How will you know if they are saying the truth from their end? Though it is still their prerogative as they are the owners of the site.
It depends on how they will manage such program. But these hunters may not be encourage to report anymore, which has the possibility that they can just abuse such bug.
hero member
Activity: 2814
Merit: 571
Leading Crypto Sports Betting & Casino Platform
November 05, 2023, 07:11:40 AM
#35
So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.

They should at least give proof that the bug was reported earlier by another bug bounty hunter and not just say that they know the bug and working on it already, bug bounty hunters will just suspect that they want to take advantage and do not want to pay, a mere thank you is not enough, I don't know much about coding, but based on what I read it consumes time and too much effort just to find bugs.

OP mentioned that he is not expecting big rewards so Betfury should get a hint and reward OP on what they think he deserves, and casinos should create a page or announcement about bugs for transparency purposes, so in case one bug bounty hunter finds one bug he can check the page if there's already a report on the bug.
legendary
Activity: 3052
Merit: 1310
November 05, 2023, 04:54:55 AM
#34
So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.

If there was someone reported about the same bugs, OP should not be able to find it because professional casino will fix it as soon as possible or at least deactivate the related features which may make them lose some money. I see that the bugs reported by OP has big possibility to be abused and may make the casino lose a lot of money. I think the casino should at least give at least a "thank" for OP to report the bugs. It does not matter the bug is reported already or not, but I think rewarding people who found bugs in the casino is a must. It does not need to be in a big amount of money but it can be anything as appreciation from the casino to anyone who reported the bug.
hero member
Activity: 2786
Merit: 646
November 04, 2023, 01:48:57 PM
#33
How much would it have been if they credited the bounty to OP?
It does need a very meticulous mind to become a bounty hunter and he could have abused these bugs if he wanted to but he reported it. I think its fair to get compensation for it.

Looks like it is hard to understand the images provided by OP but just wanted to say it is good to bring up the subject like this for other casino owners to learn from this kind of situation.

According to these bugs, the reward reaches 50k, but I think this is for very serious reasons. According to my assessment of the bugs found, 4/10.
Where did you get that 50k as a reward? Do they tell you about on that matter or simply you are just making up some assumptions basing up on whats up into your mind?

I do agree into that point above that if the said exploit is really that something serious then it should really be that rewarded considering that you didnt really make out such abuse and for your own benefit
on which means that there are really that those people who doesnt really want to abuse something just because they've been seeing some hole into the system.
Its true that this kind of skills and knowledge isnt that simple and only a few could be able to know it out and this is why it is something that needs up some compensation or reward on the time
that having those kind of discoveries of such possible exploit.

It do really sucks that they wont really be giving out on the reward even if you do see that it is really that worth on getting some reward.
If the said platform had said about that it isnt something that rewardable then it do really sucks big time but well there's nothing we can do about it.
hero member
Activity: 2870
Merit: 612
November 04, 2023, 10:57:31 AM
#32
How much would it have been if they credited the bounty to OP?
It does need a very meticulous mind to become a bounty hunter and he could have abused these bugs if he wanted to but he reported it. I think its fair to get compensation for it.

Looks like it is hard to understand the images provided by OP but just wanted to say it is good to bring up the subject like this for other casino owners to learn from this kind of situation.
hero member
Activity: 2814
Merit: 571
Leading Crypto Sports Betting & Casino Platform
November 04, 2023, 10:33:39 AM
#31
I hope Betfury will address the issue and they will eventually reward OP for his work we seldom read a complaint like this, Betfury is considered one of the top casinos here in the Crypto casino industry, and it will be a big turn-off for bug bounty hunters to read this kind of complaint.
They will prefer to shift to other reputable casinos or just exploit the bug knowing that they will not get anything from their hard work.

An issue like this will spread to bug hunters and coders they will leave Betfury as among the sites to work for bug bounty, I hope Betfury will come down here for an announcement that will satisfy everybody.
hero member
Activity: 2898
Merit: 567
November 04, 2023, 08:57:29 AM
#30
Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

You have a point bug bounty hunters will choose to do this if platforms like Betfury treat bug bounty hunters like this, yes they offer very high rewards to entice bug bounty hunters but when it comes to payment they are delaying it, some bug bounty hunters are already doing this, because they want to make sure first that they are getting something on their effort.
It is unethical for bug bounty hunters but if they keep doing this they will resort to this, finding bugs is not easy it takes knowledge, skills, and effort to find bugs so they should be rewarded, the platform will benefit if the bugs are fixed.
copper member
Activity: 2758
Merit: 1163
Leading Crypto Sports Betting & Casino Platform
November 04, 2023, 08:43:42 AM
#29
Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

Do you contact already the support? If yes then provide their response to make sure that everything is clear on both side. You should create your topic about your case so that user can follow easily your case if you a real help from the forum. Betfury has a history for altering their referral commission without further notice. Your case is just different because they totally didn’t pay you. I’m interested t see what’s their reason since there’s no way that they will cut you off without doing anything against them.

LOL on BC. they have tons problem here too for not paying some user with their profit. BC also reduce their bonus rewards so I’m sure everything will slow down too on that casino.
hero member
Activity: 756
Merit: 607
November 04, 2023, 08:16:54 AM
#28
And now communication with support and screenshots. I sent them an email with a bug report on 10/31/2023 18:12 UTC +2. The rules state that the first response from support will arrive within a maximum of 3 days. 3 days passed, no one answered my letter. As a result, I wrote to the casino website for live support and said that I had not received a response within 3 days. And almost immediately I receive a letter from the casino that they have received my bug report and have only now forwarded it to the appropriate department. Really, the bug reporting department doesn’t check letters often and doesn’t read them right away if they contain important information about bugs? What we have, the report was sent on 10/31/2023 18:12 UTC +2, the bug was still working until approximately 10/31/2023 23:00 UTC +2, I watched this evening for a certain slot, which was the main one for the bug and it was removed approximately this time. Draw conclusions, they don’t want to give fair rewards for finding bugs.
Just like many users here said, It's the risk of bug hunters and to close this case BetFury casino representatives should clear everything about your case and have evidence that someone else reported these bugs before you. I can't say definitely that the casino just doesn't want to pay for your work.
It's only fair if we see a response from the other part. From what you said you are eligible to get paid, In the other hand, It's hard to believe that a casino of thus size will manipulate you and risk their reputation for couple dollars.
legendary
Activity: 3430
Merit: 1957
Leading Crypto Sports Betting & Casino Platform
November 04, 2023, 08:15:32 AM
#27
You know what you do in instances like this....

You exploit that bug.. until you acquire a lot more money than what they owe you for the reward, then you tell them to send you the reward or you keep the reward and you deposit the balance back to them.

I also reported a bug in a system for another casino and they never gave me a cent... they also say that they knew about the bug, but when I asked them why they did not fix it.... they simply stopped responding.  Roll Eyes
legendary
Activity: 1764
Merit: 2032
The Alliance Of Bitcointalk Translators - ENG>SPA
November 04, 2023, 08:13:20 AM
#26
Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.
I have been a bounty hunter, and AFAIK some projects took long to pay because marketing came first , then the sale, and then came the minting of coins depending on the sale and lastly the distribution and most hunters didn't understand this process and wanted to be paid upon the end of the bounty campaign but token sale was not concluded.

Well, this is in part true, but Fivestar4everMVP was right when he said that bounty hunters should we aware that some projects in the forum won't keep to their word in the sense that some of them won't pay bounty hunters at all, not just that they will pay late or when their coin's value has gone down.

But with bug hunting,  these actually need to be treated with the urgency they deserve and seeing they have a dedicated email for such means someone is ready to look into such matters but if they dont honor their side of the deal shows how dishonest they are...besides the least they can do is acknowledge receiving the report to avoid such scam accusations.

I see bug hunting as a dual purpose offer from online services: on one hand, they avoid further exploitation of the bugs found by hunters but, on the other, it is a way to seduce potential black hat hackers so they don't go to the dark side.

Because most people like to think that they are good, and many hackers will prefer to get a lower reward in exchange of keeping their ethics intact. I don't think it is wise to break this powerful unwritten rule from the service side, but they will know what they are doing.

Anyway, as others said before me, it may be too soon to jump to conclusions.
hero member
Activity: 1414
Merit: 915
🇺🇦 Glory to Ukraine!
November 04, 2023, 07:55:16 AM
#25
I'm really sorry to hear Betfury screwed you over on that bug bounty situation.  That's so frustrating when you take the time to find issues and report them, but then they just deny your claim and  totally bogus.   

Bug hunting should be about working together to make things more secure. Companies ought to stand by their word when they offer bounties.  The least they could do is send an email saying they got your report, even if they don't think it qualifies for bounty.  Just basic communication and transparency.  Thats how you build trust and credibility.  Hopefully Betfury hears this and handles it better.  They gotta keep a good reputation in the bug hunting world.  It's a win-win when bug hunters and companies can help each other.  But pulling crap like this hurts everyone.
hero member
Activity: 1792
Merit: 871
Rollbit.com ⚔️Crypto Futures
November 04, 2023, 07:41:23 AM
#24
Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.
I have been a bounty hunter, and AFAIK some projects took long to pay because marketing came first , then the sale, and then came the minting of coins depending on the sale and lastly the distribution and most hunters didn't understand this process and wanted to be paid upon the end of the bounty campaign but token sale was not concluded.

But with bug hunting,  these actually need to be treated with the urgency they deserve and seeing they have a dedicated email for such means someone is ready to look into such matters but if they dont honor their side of the deal shows how dishonest they are...besides the least they can do is acknowledge receiving the report to avoid such scam accusations.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.
Whitehat hacker, whichever way you look at it you doing a great service for the project as they will nolonger be exploited.
sr. member
Activity: 2436
Merit: 324
November 04, 2023, 07:12:10 AM
#23
Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.

If you are really that someone who do really loves on making up some back testing when it comes on finding bugs and exploits then there are lots of bounty sites on which you could really be able to test out your skills. For those who are really that trying out to bypass or making out some checking for some exploits on gambling sites and expecting something like some sort of bounty then it would really be that always better that you should really be talking or discussing if ever there would really be some bounty and not really just trying out to sue or ask our for some payments just because you have found something.
As long a certain site or platform didnt really announce for some bounty program then it would really be your choice because they can anytime ignore or reject out if ever you have find out some bugs or exploits.

This is why if you are really that serious when it comes to bounty hunting or bug tester or exploit then you should approach the site first or the team in speaking about this stuff
if ever you do able to see some holes or exploits then you would really be getting some bounty.Its better to ask out for some clarifications so that you wont be
wasting up your time and effort.
legendary
Activity: 2226
Merit: 1049
Leading Crypto Sports Betting & Casino Platform
November 04, 2023, 06:06:07 AM
#22
Being a bug bounty hunter for gambling casinos is like being a bounty hunter on this forum, some casinos can't be trusted to keep to their word, same way some projects end up not paying their bounty hunters after they have spent weeks promoting the project on the forum and outside the forum.

Sorry to say this though, but with all the complains I've read online about companies refusing to pay bug bounty hunters what they promise to pay, if I was or were a bug bounty hunter, I did first exploit whatever bug I came across on any casino, I will do this and then after, contact the casino about it, I will decide how much to return back to them, and keep the rest of the funds as my bug bounty payment.
full member
Activity: 2240
Merit: 175
#SWGT PRE-SALE IS LIVE
November 04, 2023, 05:42:12 AM
#21
Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.

You should If you have all the evidence to back up your claim, you can create a scam report instead of dropping here accusing Betfury of a different issue, this is a bug bounty issue, not a referral issue and your issue is not in any way related to bug bounty and you are promoting another casino here which is off topic from the issue that we are all discussing.
sr. member
Activity: 714
Merit: 296
Cashback 15%
November 04, 2023, 05:29:02 AM
#20
This is not a scam related issue, take it as a lesson and move on, this is one of the difficulties that bounty hunters used to face.

Firstly, know that you are not the only bounty hunter chasing the bounty, and they have their rules that it's first come first served, if you want to be a successful bounty hunter you need to work harder and faster, to beat other bounty hunters at their time.

I have a friend who is also a bounty hunter who likes finding bugs for companies and projects, he have to join multiple bounties before one or two pay him what he deserved, most times they always fail or some other lucky bounty hunger beat him to the prize with time.

Some platforms are well organized, they always give reasons why they may not pay up even if you find a bug and they will give details on how many bug finders they will pay, so even if 20 hunters are on this maybe only 3 will be selected, this is one of it's disadvantage.

What I believe that Betfury may have some wrong is keeping it to themselves after someone already found a bug, they should have a email alert in place that will notify all the bounty hunters and they will stop working on their bug finding journey.
 
hero member
Activity: 854
Merit: 1246
November 04, 2023, 03:03:40 AM
#19
- snip -

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.
You have explained everything well for the op to understand so it is left for him to continuingly asking them to know what is the issue from what he has said and and your explanation, I don't think there is no scam related matter here. And if another user has reported the bug before Op they have to tell that, it has been reported before you. And Op too allow them to make a research (investigation) about the case now that you bringing it to their noticed. Probably you were not the only person submitted it so they have to cross check all.
sr. member
Activity: 1442
Merit: 390
★Bitvest.io★ Play Plinko or Invest!
November 04, 2023, 01:26:31 AM
#18
This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.
Why did they ask for how the bug was found then if they already had done it themselves? Wouldn't they emailed OP that they've already found it and that they were sorry that OP was too late for the report? But in the screenshots of the email, there seems to be no indication that they got to it first or that someone got to it first also your assumption that there's a lot of bug hunter for Betfury isn't absolutely right, what if that's how a lot of other bug hunters think that they didn't bother trying to hunt for Betfury which ends up with Betfury having less hunters than expected.
hero member
Activity: 1918
Merit: 564
November 04, 2023, 12:06:48 AM
#17
OP, did their bug bounty department get back to you after they asked for more details and the exact steps used to recreate the bug? Just because they havent hit you back yet doesnt automatically mean they will reject paying you for finding the bug.  They might still be reviewing your bug report. Id give them a bit more time before assuming they are gonna deny your bounty claim.  But definitely follow up if its been more than a few days with no response and dont let them ignore you if you put in the work to find a legit bug!


It looks like @OP had a trauma of not getting paid with the discovered bug.  @OP stated that the first bug he find was way back six months ago and he was denied of payment.  Now he discovered 3 more bugs and informed the casino, and yet @OP feels like the casino won't be paying him again thus he get so eager to make the community in Bitcointalk to know about his case.  I would not blame @OP but I agree that it is too early for this thread to accuse Betfury of not paying you again.  This may even trigger Betfury to deny you of payment since you breach some condition in their Bug bounty terms.

If ever, Betfury failed to recognized your contribution and failed to pay you, you can always create a topic on the scam accusation board of this forum.
newbie
Activity: 14
Merit: 0
November 03, 2023, 08:52:05 PM
#16
Well, to be honest, I'm thinking of opening a thread to present my case on Betfury, I have more than 500 Referrals that generated $150-$200 quickly in referral earnings and now I earn $0. Betfury not only changed the reward for referrals but also altered the results to NOT PAY.

Either that or everyone stopped using BetFury since BC.GAME has gained all the ground by paying for everything and nothing. Long live bc.game.
legendary
Activity: 3192
Merit: 1198
Bons.io Telegram Casino
November 03, 2023, 07:19:45 PM
#15
There's nothing on the communication that says that they are not rewarding you although 48 hours is what you think is enough time to get a proper response since you posted it here I'm sure they are now aware of it and will respond, it is not yet time to move it in the scam accusation unless they deny you of your reward even though because of your report they have patched the bug.

Have you followed the flow of communication when it comes to bug bounty report

Quote
If you find a bug, exploit or vulnerability, please report this to [email protected]. Describe the bug in detail with steps to reproduce and a full description. Also show the result of using this bug/exploit/vulnerability.
Here are details of the procedure and important points of the BetFury report flow:
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.)
The first response time from BetFury can take up to 3 days.
We check all points of your report within 1 week after the first response. After that we notify you about the test results.

If the bug is confirmed and reproduced, we try to quickly resolve the bug/exploit/vulnerability within 2 weeks after the first vulnerability was confirmed.
If the bug is not confirmed and reproduced or is already known, the BetFury team closes the case with no reward.
BetFury is obligated to pay the reward immediately after the bug/exploit/vulnerability was fixed.
https://docs.betfury.io/betfury-bug-bounty-program


I think you posted this too early.

At the time of sending the bug report, the bug was still working for at least a few hours. If it weren't already working, I wouldn't have sent the report.
A total of 3 bug reports were sent. Two bugs worked 100% with bonuses, about the third bug they told me that they knew, but apparently they know and it works.

I'm not saying that the casino as a whole is bad, the crux of the problem is the reward for finding bugs.
Let people know what difficulties they may encounter when submitting bug reports.

I'm not defending Betfury, you posted that it will not pay when according to the terms on their bug bounty program page there is a time element involved before they can be obligated to pay the rewards by posting and using the word
Quote
will not pay
you assume that they are not gonna pay, I think its not fair
for Betfury let them do their investigation first and if there is no action on their part based on the time they allocate then you can file an accusation.

You deserve the bug bounty rewards of course, but follow what's on their terms and do not assume right away that they are not going to pay.
sr. member
Activity: 966
Merit: 340
November 03, 2023, 07:04:22 PM
#14
How many days pass since you made this report? If they are ignoring you for couple of weeks with no sign that you will be take care of after those report then maybe they are start avoiding.

But if it just take for couple of days then try to give them sometime to review if they find your report a serious matter since it may take time for them to review your report so much better to wait an update coming from them. Also this post is not meant to be posted here so maybe I guess this belong to reputation thread and after they are not totally responding and didn't give your bounty then maybe this belong to scam accusation.
legendary
Activity: 1484
Merit: 1355
November 03, 2023, 04:25:34 PM
#13
OP, did their bug bounty department get back to you after they asked for more details and the exact steps used to recreate the bug? Just because they havent hit you back yet doesnt automatically mean they will reject paying you for finding the bug.  They might still be reviewing your bug report. Id give them a bit more time before assuming they are gonna deny your bounty claim.  But definitely follow up if its been more than a few days with no response and dont let them ignore you if you put in the work to find a legit bug!
sr. member
Activity: 728
Merit: 421
November 03, 2023, 03:35:00 PM
#12
Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?


Not really though but you know casinos sometimes act funny when such happens  and if they do not want to reward bug hunting, they start telling you that the time for such elapsed and sometimes they tell that someone else already reported that and they are on the verge of rounding up with the work on the bug before you noticed it all these you know just to keep away but I think it should be looked into as well to minimise the occurrences of bug hunting with no rewards.

Sometimes they claim the time for the bug hunting elapsed but the bug discovered is the type that could cause a big wreckage if it has not been discovered yet and I think if that should be the scenario, they should be able to reward whomever discovered such bug because that person just saved them of a possible lapses that could cause them a whole lot in the future irrespective of whether they have an ongoing bug hunt rewards or not.
It do really sucks on such case on which there's no way on knowing that they are really that indeed truthfully telling whether its been already discovered by someone or simply making out some alibi just because they dont really like to pay up the bounty reward on someone who had discovered. Somewhat there are really those exploits or bugs which are worth to be paid off with some bounty and there are ones which are really that very minimal or something  not really that worth on getting some rewards but to those people who are really that optimistic about  getting it then they would really be having that kind of self entitling that they are really that worth on getting paid up even if its not really that right anymore. Im not really that a technical guy who do really knows on whats the real negotiations or set up about bounty  about on bugs but basing up on common sense on which on the said bugs that been mentioned then it would really be just that ethical that they would really be that needing to reward someone who do discover some serious bug which it could be possibly be exploited and could really be that abused which in result into huge effect into their revenue. They should at least showing up some rightful act if its worth to be given some bounty or not, or not really just
that simply trying out to ignore basing up on whats been discovered.

Truly some casinos do act up whenever they do not want to pay up for bug discovered by their users. Maybe a minor bug which can be understandable but at least there are some bugs that seems threatening to the casino that to should be rewarded whether there is a bug bounty or not, those users who discovered them should be appreciated and rewarded because what they have done have saved such casino the unforseen danger they could have encountered in the nearest future but have been averted by a good Samaritan who has the casino at heart.
The idea of rewarding bug finders should not be swept under the carpet because those bugs discovered could have been loopholes by hackers to make their ways into the entire system to commit their crime.

In all, bug hunters or finders should be appreciated and rewarded for their work because what they do is not as easy as one of thinks it is.
legendary
Activity: 3122
Merit: 1171
November 03, 2023, 02:28:07 PM
#11
If you think BetFury screwed you with this, then you should put everything in the scam accusation thread! This post leads to nothing, whether you accuse them of something or not. It's not clear to me specifically what you found, what you sent them, and what kind of answer they gave you... but certainly, if you think you have been harmed, start a scam accusation topic and that's it. With all the evidence you have, and maybe then I would trust this.

I saw your post in their ANN thread, but I am not convinced about your story. Maybe I am wrong, but you should provide more info if you wish to prove your case!
legendary
Activity: 3094
Merit: 1127
November 03, 2023, 02:21:10 PM
#10
Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?


Not really though but you know casinos sometimes act funny when such happens  and if they do not want to reward bug hunting, they start telling you that the time for such elapsed and sometimes they tell that someone else already reported that and they are on the verge of rounding up with the work on the bug before you noticed it all these you know just to keep away but I think it should be looked into as well to minimise the occurrences of bug hunting with no rewards.

Sometimes they claim the time for the bug hunting elapsed but the bug discovered is the type that could cause a big wreckage if it has not been discovered yet and I think if that should be the scenario, they should be able to reward whomever discovered such bug because that person just saved them of a possible lapses that could cause them a whole lot in the future irrespective of whether they have an ongoing bug hunt rewards or not.
It do really sucks on such case on which there's no way on knowing that they are really that indeed truthfully telling whether its been already discovered by someone or simply making out some alibi just because they dont really like to pay up the bounty reward on someone who had discovered. Somewhat there are really those exploits or bugs which are worth to be paid off with some bounty and there are ones which are really that very minimal or something  not really that worth on getting some rewards but to those people who are really that optimistic about  getting it then they would really be having that kind of self entitling that they are really that worth on getting paid up even if its not really that right anymore. Im not really that a technical guy who do really knows on whats the real negotiations or set up about bounty  about on bugs but basing up on common sense on which on the said bugs that been mentioned then it would really be just that ethical that they would really be that needing to reward someone who do discover some serious bug which it could be possibly be exploited and could really be that abused which in result into huge effect into their revenue. They should at least showing up some rightful act if its worth to be given some bounty or not, or not really just
that simply trying out to ignore basing up on whats been discovered.
sr. member
Activity: 728
Merit: 421
November 03, 2023, 02:03:04 PM
#9
Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?


Not really though but you know casinos sometimes act funny when such happens  and if they do not want to reward bug hunting, they start telling you that the time for such elapsed and sometimes they tell that someone else already reported that and they are on the verge of rounding up with the work on the bug before you noticed it all these you know just to keep away but I think it should be looked into as well to minimise the occurrences of bug hunting with no rewards.

Sometimes they claim the time for the bug hunting elapsed but the bug discovered is the type that could cause a big wreckage if it has not been discovered yet and I think if that should be the scenario, they should be able to reward whomever discovered such bug because that person just saved them of a possible lapses that could cause them a whole lot in the future irrespective of whether they have an ongoing bug hunt rewards or not.
legendary
Activity: 2618
Merit: 1103
November 03, 2023, 01:42:16 PM
#8
Hello! Betfury will not pay the promised bounty for bugs found. I found bugs in Betfury by logically calculating the operation of the system.

A total of 4 bugs were found. The first report was made about six months ago and then I was denied a bounty, citing that the bug had already been closed before my report.
Bug was with a bonus for registering 100 free spins, which allowed, after spinning the free spins, to receive bonus money to the main account and you could immediately withdraw it, with certain manipulations.

What does it mean that the bug was closed? Was it there when you reported it? I'm asking because if it was reported by someone else, but not fixed before you reported it, they should at the very least give you some small reward, like a casino bonus, free spins, or something like that.

What if all companies that put a bounty on bugs acted like this? Each time someone reported a bug they'd say that it's too late because they found it themselves, thank you for your service you sucker.

Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late

Oh really? So we're going to treat it like standard practice?
legendary
Activity: 1414
Merit: 1108
November 03, 2023, 01:36:23 PM
#7
Your reports were made on the 31st of October, from what I read on the OP and that is barely 3days ago which makes your outburst way too early to consider any kind of trouble.
There are chances that, it might have been offered a previous reporter but, looking at the time frame between bug reports and having it fixed which is barely hours away, I can’t say there is a possible coincidence between having any previous reporter before yourself.

The probability to delay might be that, there are procedures to having these rewards handed out to bug hunters and you might as well give them a well enough time to handle the issue while, writing to support after a lofty time that could translate to neglect.

Meanwhile, have you tried sending a pm to their forum representative? If no, you could do that and hope the user might represent your interest in this regard.
sr. member
Activity: 728
Merit: 421
November 03, 2023, 01:27:50 PM
#6
Most times bug findings involves these risks of you not being paid with the claim of the casino that you likely arrived late but I see the bug you were able to find is very crucial one and as such they should accord you some audience and rewards. No one can tell why they have not responded to your bug hunt but I would advise you be patient a little  with them and see how they handle the situation.

I will advise you move this thread to reputation board as it does not belong here if I am not mistaken. I believe sending it there would also attract more reputable members to look into it and help you resolve your predicament with the casino.
hero member
Activity: 2562
Merit: 659
Dimon6969
November 03, 2023, 01:16:12 PM
#5
The title and the content seems like not in sync. The title looks like there’s already a response from Betfury but the content doesn’t state anything about Betfury response on why they will not pay you aside from your assumption that they will not pay you just because their response is already exceeded to their target date.

The date they provide is just an estimated date which usually took longer than that in actual depending on the case you give to them. This kind of report needs further verification that took a lot of time. Please provide screenshot too about Betfury response on why they will not pay to make this thread complete information because your side is just one-sided.
legendary
Activity: 3192
Merit: 1198
Bons.io Telegram Casino
November 03, 2023, 12:42:58 PM
#4
There's nothing on the communication that says that they are not rewarding you although 48 hours is what you think is enough time to get a proper response since you posted it here I'm sure they are now aware of it and will respond, it is not yet time to move it in the scam accusation unless they deny you of your reward even though because of your report they have patched the bug.

Have you followed the flow of communication when it comes to bug bounty report

Quote
If you find a bug, exploit or vulnerability, please report this to [email protected]. Describe the bug in detail with steps to reproduce and a full description. Also show the result of using this bug/exploit/vulnerability.
Here are details of the procedure and important points of the BetFury report flow:
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.)
The first response time from BetFury can take up to 3 days.
We check all points of your report within 1 week after the first response. After that we notify you about the test results.

If the bug is confirmed and reproduced, we try to quickly resolve the bug/exploit/vulnerability within 2 weeks after the first vulnerability was confirmed.
If the bug is not confirmed and reproduced or is already known, the BetFury team closes the case with no reward.
BetFury is obligated to pay the reward immediately after the bug/exploit/vulnerability was fixed.
https://docs.betfury.io/betfury-bug-bounty-program


I think you posted this too early.
legendary
Activity: 1820
Merit: 966
In Search of Incredible
November 03, 2023, 12:40:14 PM
#3
Draw conclusions, they don’t want to give fair rewards for finding bugs.
You are in a hurry to draw the conclusions. Did they inform you that they won't give any rewards to you? Maybe they have taken actions according to your report. But you should have reached their email support or the bug bounty team again instead of bringing the issue publicly. According to the BETFURY BUG BOUNTY PROGRAM:

Quote
You must not share the information about the bug/exploit/vulnerability in the internet, be it community or forum, etc.
sr. member
Activity: 1046
Merit: 363
Bitcoin Casino Est. 2013
November 03, 2023, 12:23:51 PM
#2
- snip -

This is one of the risk for bugs hunter because the site offers to anyone "first come, first served".
The offers is not exclusive only for you, and usually any sites will collecting bugs they found first before they release a new patch to fix them all together.

So maybe they already found the bugs before you reported it, or maybe someone already reported it first. Public will not know about it, only the staff and devs on that website.
Well if you feel that you have been scam by that website, I suggest to bring this thread to the scam accusation section, not here on the gambling section.
member
Activity: 239
Merit: 11
November 03, 2023, 11:56:44 AM
#1
No longer relevant, delete topic.
Jump to: