Pages:
Author

Topic: SatoshiDice Investor Scam (Read 1907 times)

hero member
Activity: 1344
Merit: 507
April 22, 2017, 02:01:09 PM
#25
To answer Game-Protect point’s directly:

Quote from: game-protect
1) Bitcoin hot wallet is almost always empty since December 2016.
For security reasons it advisable not to have a large sum of coins in a hot wallet. When the hot wallet needs funds we have to manually transfer coins from our cold storage. Because of this and the increase in withdrawals due to the btc price increase and naturally investors wishing to take advantage of this.
O.k., I understand that it is not adviseable to have a large sum of coins in a hot wallet.

What I do not understand is

1) Why you need so long to re-fill the hot wallet?

2) Why was the person who "hacked" those 4 accounts able to withdraw the 200+ instantly, while others were not able to withdraw 5 BTC?

I mean you said for security reasons the hot wallet had not large amounts, but curiously your security did not work for the 200+ defrauded BTC?


Quote from: game-protect
2) Dice game investor account balances in the height of minimum around 200+ Bitcoins “magically” disappeared and were instantly withdrawn.
This was due to a combination of factors. The 4 investors were connected albeit coincidentally by the following. All compromised account emails were present in one or more of the btc-e, 2plus2 and betking.io hacks.
The below time line gives more detail  to game protects’ analysis.
August 26, 2016: Reports of leaked BTC-e accounts being attacked.

September 1, 2016: Leakedsource.com lists BTC-e and Bitcointalk accounts as available to hackers
https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/

November 20, 2016: 2plus2 forum hacked
https://www.pokernews.com/news/2017/01/twoplustwo-discovers-user-database-hack-jan-8-26740.htm
Quote
TwoPlusTwo’s user database at forumserver.twoplustwo.com was recently compromised, according to an email from TwoPlusTwo management sent to users Jan. 9. The hack was discovered Jan. 8.

December 24 2016: Betking.io hack hacked
Quote
The attacker had complete access to the database. This means he could have seen player dice seeds, balances, email addresses, emergency withdrawal addresses, IP addresses and two factor authentication backup codes.

December 27 2016 - January 9 2017: 4 Investor accounts login and withdraw.
Whoever the person was that withdrew had the account details. The account emails were all present in one or more of the btc-e, 2plus2 and betking.io hacks mentioned above.
We can not check what happened on your gaming server and we can not check if the by you mentioned events are anyhow related to the 200+ disappeared BTC.

What remains is that your security feature "low hot wallet amounts" failed exactly for those 4 accounts!


Quote from: game-protect
3) Satoshidice scam server administrator is not able to check if gaming server was compromised, even though every second of what happened is (should be) recorded! The site has no 2 factor authentification, a very basic standart for Bitcoin exchanger and their server probably do not fulfil very basic security standarts as well!
There is no evidence of the servers being compromised. Part of the work is to exclude that the accounts in question simply made a withdrawal and then stated that they didn't make the withdrawal.

We got one report of a user who clicked a Bitcointalk phishing link, entered his information and then got his balance stolen on Satoshidice.

We have seen attempts of password guessing on what appears to be big lists of emails. We do not store password in clear text in the database but we looked at real-time password attempts and there thousands of login attempts made with different emails and password "password". All those IP addresses are blocked and stored for future evidence.
You can see in the server logs what happened. If the customer logged in directly, if there were hacking attempts trying multiple passwords, if the 4 "compromised" accounts used the same IP, devices, etc. Server admin can check this within 1 day.


Quote from: game-protect
4) January 11, 2017, the account Underdog01253 was created, placed a 0.25 BTC ($250!) slot bet and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC!
There is a large bet history for the user “Underdog01253”. The user continued to play and lost ~3/4 of their winnings
No one of us can check if this user really exists. Bet histories are irrelevant, as you can simply manipulate them! As we all know, your licensor Curacao eGaming do not control anything.

If you consider that

1) You destroyed a $12 million paid domain

2) Investors had started to withdraw 100s of invested BTC

3) Customers were not able to withdraw in a timely manner

4) 200+ BTC disappeared and instantly withdrawn, even though you had the security system of low hot wallet amounts

5) MegaDice obviously blatant lies

6) A new account registered, placed a $250 slot bet! and instantly won a x1215.92 multiplier 303 BTC slot and contrary to your terms and conditions, then everyone can think his part. I never said this was an inside job, because I have no proof, but everyone can think what this might was...


Quote
5) The 303.73 BTC slot win was reduced from Satoshi Dice investor account balances, even though the “Bet on the house” terms and conditions clearly state that investors only invest in the Satoshi Dice game
We did not update our description on the “Bet on the House” tab when we added the Satoshi Slot game to the site. This was an error, of course on our part. However, it is worth noting:
It was was the description that should have been updated, not the Terms & Conditions as agreed to when a user creates an account.
Long term backers affected by the big Slot win were also affected positively overall.
This is the only part where I call you a scam, because I have proof of this scam!

You have 2 descriptions of how investors bet on the house?

1) "Bet on the House" description

2) Bet on the House description in your Terms & Conditions

Even if you had 2 descriptions (what I doubt), the publicly visible 1) "Bet on the House" description is applicable.
 

The long term backers affected by the big slot win were affected positively by the slot bets before and after the big win:

Overall, SatoshiSlot has given over 150 BTC to backers.

Your argument it was o.k. to reduce the 303 BTC slot win from Dice investor balances, because longtherm backers were not affected is absolute nonsense!

If someone started to invest 2 weeks ago?

Despite of this, I was informed that no one knows what profits he received or losses were reduced from his Dice investor account balance.
full member
Activity: 129
Merit: 100
Satoshi Dice Support
April 22, 2017, 03:44:13 AM
#24
First, the background:

August 26, 2016: Reports of leaked BTC-e accounts being attacked.

September 1, 2016: Leakedsource.com lists BTC-e and Bitcointalk accounts as available to hackers
https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/

November 20, 2016: 2plus2 forum hacked
https://www.pokernews.com/news/2017/01/twoplustwo-discovers-user-database-hack-jan-8-26740.htm
Quote
TwoPlusTwo’s user database at forumserver.twoplustwo.com was recently compromised, according to an email from TwoPlusTwo management sent to users Jan. 9. The hack was discovered Jan. 8.

December 24 2016: Betking.io hack hacked
Quote
The attacker had complete access to the database. This means he could have seen player dice seeds, balances, email addresses, emergency withdrawal addresses, IP addresses and two factor authentication backup codes.

December 27 2016 - January 9 2017: Whale accounts login and withdraw.
Whoever the person was that withdrew had the account details. The account emails were all present in one or more of the btc-e, 2plus2 and betking.io hacks mentioned above.

February-March 2017: 2fa implemented and whale accounts reimbursed plus the profit from their investments.

Regarding the 300 BTC Slot game win

January 11, 2017,The player  Underdog01253 (https://www.satoshidice.com/user/ed10cec930365a1af6db2225843f6e36) made a large win on the slot game. People have been wondering how such a large win could be allowed from the bankroll. The max bet amount on the slot game is not dynamic as on the dice, it has to be done manually. The slot game has many paylines, it doesn't really work well if the bet sizes on the slot game would be in increments of 14.235, 18.503, 26.322 instead of 10, 15, 25 ect.

With the Bitcoin price increasing rapidly and many users withdrawing from the bankroll, the Slot game ended up allowing relatively large wagers. Overall, Satoshidice paid out more than the expected value to investors since the start, meaning that the bets actually generated more to investors than the expected outcome.




To answer Game-Protect point’s directly:

Quote
1) Bitcoin hot wallet is almost always empty since December 2016.
For security reasons it advisable not to have a large sum of coins in a hot wallet. When the hot wallet needs funds we have to manually transfer coins from our cold storage. Because of this and the increase in withdrawals due to the btc price increase and naturally investors wishing to take advantage of this.
Quote
2) Dice game investor account balances in the height of minimum around 200+ Bitcoins “magically” disappeared and were instantly withdrawn.
This was due to a combination of factors. The 4 investors were connected albeit coincidentally by the following. All compromised account emails were present in one or more of the btc-e, 2plus2 and betking.io hacks.
The below time line gives more detail  to game protects’ analysis.
August 26, 2016: Reports of leaked BTC-e accounts being attacked.

September 1, 2016: Leakedsource.com lists BTC-e and Bitcointalk accounts as available to hackers
https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/

November 20, 2016: 2plus2 forum hacked
https://www.pokernews.com/news/2017/01/twoplustwo-discovers-user-database-hack-jan-8-26740.htm
Quote
TwoPlusTwo’s user database at forumserver.twoplustwo.com was recently compromised, according to an email from TwoPlusTwo management sent to users Jan. 9. The hack was discovered Jan. 8.

December 24 2016: Betking.io hack hacked
Quote
The attacker had complete access to the database. This means he could have seen player dice seeds, balances, email addresses, emergency withdrawal addresses, IP addresses and two factor authentication backup codes.

December 27 2016 - January 9 2017: 4 Investor accounts login and withdraw.
Whoever the person was that withdrew had the account details. The account emails were all present in one or more of the btc-e, 2plus2 and betking.io hacks mentioned above.


Quote
3) Satoshidice scam server administrator is not able to check if gaming server was compromised, even though every second of what happened is (should be) recorded! The site has no 2 factor authentification, a very basic standart for Bitcoin exchanger and their server probably do not fulfil very basic security standarts as well!
There is no evidence of the servers being compromised. Part of the work is to exclude that the accounts in question simply made a withdrawal and then stated that they didn't make the withdrawal.

We got one report of a user who clicked a Bitcointalk phishing link, entered his information and then got his balance stolen on Satoshidice.

We have seen attempts of password guessing on what appears to be big lists of emails. We do not store password in clear text in the database but we looked at real-time password attempts and there thousands of login attempts made with different emails and password "password". All those IP addresses are blocked and stored for future evidence.

Quote
4) January 11, 2017, the account Underdog01253 was created, placed a 0.25 BTC ($250!) slot bet and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC!
There is a large bet history for the user “Underdog01253”. The user continued to play and lost ~3/4 of their winnings

Quote
5) The 303.73 BTC slot win was reduced from Satoshi Dice investor account balances, even though the “Bet on the house” terms and conditions clearly state that investors only invest in the Satoshi Dice game
We did not update our description on the “Bet on the House” tab when we added the Satoshi Slot game to the site. This was an error, of course on our part. However, it is worth noting:
It was was the description that should have been updated, not the Terms & Conditions as agreed to when a user creates an account.
Long term backers affected by the big Slot win were also affected positively overall.


We of course took responsibility for the lack of 2fa on player accounts and reimbursed the 4 investors (including their profits) and players that were impacted by the lack of 2fa.
2FA was then implemented with additional security measures

The long term backers affected by the big slot win were affected positively by the slot bets before and after the big win:

Overall, SatoshiSlot has given over 150 BTC to backers.
hero member
Activity: 1344
Merit: 507
February 17, 2017, 01:40:10 AM
#23
I remember when Satoshi Dice scammed the shit out of me when their Company's shares were being sold on BTC-TC and Havelock.

Not surprised to see this.  Erik Voorhees is a piece of shit.
How did they scam you and how much was your damage?
ar9
sr. member
Activity: 352
Merit: 250
February 17, 2017, 01:29:50 AM
#22
I remember when Satoshi Dice scammed the shit out of me when their Company's shares were being sold on BTC-TC and Havelock.

Not surprised to see this.  Erik Voorhees is a piece of shit.
hero member
Activity: 1344
Merit: 507
February 16, 2017, 11:36:07 PM
#21
Yeah I think we should keep them to remember that it wasn't all positive!

Hopefully help others from making a bad decision.

Do you think there is something wrong with SatoshiDice investment?

Absolutely - something very strange is going on there. Very risky place to be.

We pulled out of them in the third month and wrote about it in the monthly report:

http://bitcoingamblingreviews.com/bitcoin-gambling-investments-312/
hero member
Activity: 1344
Merit: 507
February 13, 2017, 03:35:29 AM
#20
Background
As you may be aware, a user on SatoshiDice had a BIG win recently.

On January 11, 2017, Underdog01253 (user ID 2789717) placed a bet of 0.25 BTC and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC.

This bet was placed on SatoshiSlot which shares the same bankroll as SatoshiDice.


Here's the scam
SatoshiDice claims they employ the Kelly criterion to limit the maximum profit to 1.9% per bet.
Satoshi Dice keeps the maximum profit a player can make on a bet to 1.9% of the bankroll (employing the Kelly criterion).

How did they allow this user to win ~14% of the bankroll in a single bet?
"Here's the scam": Your quote about the Kelly criterion to limit the maximum profit to 1.9% per bet is in regards to Satoshi Dice only.

There are no terms and conditions in regards to Satoshi Slots, therefore a slot player can win whatever he likes. Smiley

The criminal offense is to reduce this 303 BTC slot win from investor balances!

Did they meanwhile put the Satoshi Slot loss reduction back to your investor balance?
newbie
Activity: 14
Merit: 0
January 23, 2017, 10:34:55 AM
#19
 Undecided beware guys remember all gambling are same.All gambling games are bot not human playing.
hero member
Activity: 1344
Merit: 507
January 22, 2017, 04:36:20 PM
#18
If investors get their account balance reduced because of house losses, is it stated what kind of game (dice or slot) caused this house loss?
No. The only reason I was able to find this out is because the bet showed up on the public big wins table.

When I click your link, it shows only the recent rolls for the past minutes. Do you have any other source for his win?

You can see these stats live by going to big wins and clicking last 30 days.

Based on what do Satoshi Slot share the same bankroll as Satoshi Dice?
1) Knowing my investor balance before and after that day.
2) Seeing this win of 303 BTC that correlated to the amount of site bankroll lost.
Thank you for the info!

I summed it up here: Satoshidice scam, 500+ Bitcoins defrauded and disappeared! If you have something to add, please leave a reply below the article.

I can inform that take Satoshi Slot losses out of the investor account is 100% sure a scam, as it is nowhere mentioned in the "Bet on the house" terms and conditions that investors are part of Satoshi Slot's bankroll.

member
Activity: 112
Merit: 10
BitWAB admin team
January 22, 2017, 04:18:05 PM
#17
If Satoshidice would prove to run scam or default after an attack, that would be a a massive hit to bitcoin gambling community as the site is considered bitcoin gambling de-facto game.

Right now https://www.satoshidice.com/ returns 504 Gateway Time out error, any news on that?

Let's hope for the best.

~BitWAB Team~
Be the winner!
newbie
Activity: 18
Merit: 0
January 22, 2017, 03:07:25 PM
#16
If investors get their account balance reduced because of house losses, is it stated what kind of game (dice or slot) caused this house loss?
No. The only reason I was able to find this out is because the bet showed up on the public big wins table.

When I click your link, it shows only the recent rolls for the past minutes. Do you have any other source for his win?
https://s29.postimg.org/96aku5fev/Big_Win.png
You can see these stats live by going to big wins and clicking last 30 days.

Based on what do Satoshi Slot share the same bankroll as Satoshi Dice?
1) Knowing my investor balance before and after that day.
2) Seeing this win of 303 BTC that correlated to the amount of site bankroll lost.
hero member
Activity: 1344
Merit: 507
January 21, 2017, 11:42:02 AM
#15
-snip-

Btw, how much is the house edge for Dice?

According to their investment page the edge on dice is 1.9%. This agrees with their payout of x2.00003 when less than 32145 (49.049% chance)
Thank you for the info.

This confirms that investors do not invest in Satoshi Slot, because the house edge for slot is 3,5% and in the "Bet on the house" terms and conditions is nothing metioned about a 3,5% house edge.

If investors get their account balance reduced because of house losses, is it stated what kind of game (dice or slot) caused this house loss?


Background
As you may be aware, a user on SatoshiDice had a BIG win recently.

On January 11, 2017, Underdog01253 (user ID 2789717) placed a bet of 0.25 BTC and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC.

This bet was placed on SatoshiSlot which shares the same bankroll as SatoshiDice.
When I click your link, it shows only the recent rolls for the past minutes. Do you have any other source for his win?

Based on what do Satoshi Slot share the same bankroll as Satoshi Dice?


newbie
Activity: 18
Merit: 0
January 20, 2017, 11:54:24 AM
#14
-snip-

Btw, how much is the house edge for Dice?
According to their investment page the edge on dice is 1.9%. This agrees with their payout of x2.00003 when less than 32145 (49.049% chance)

-snip-

If the player placed a bet of 0.25BTC and won a x1215.92 multiplier well this is not a joke amount of winning. Its a big amount of bitcoin take note not satoshi. I don't know if this is only a way of hyping the people just to seek more player to play in the games. Do you have any proof of this things?
A player made this bet and won, it is publicly viewable in the "big wins, last 30 days" list. I do not advocate playing or investing at satoshidice. In fact, I advocate the opposite; this site has gone to shit and everyone should cash out immediately.

The edge on the slot game is higher than on the dice, so the Kelly criterion allows higher bets.

The SatoshiSlot has a theoretical payout percentage of 96.5%. This however cannot be determined to the same precision as the dice, as in the slot the RTP/edge is calculated by a simulation, known as the "theoretical payout percentage" or RTP, "return to player".
The max bet on the slot game is not automated as on the dice, it has to be done manually. The slot game has many paylines, it doesn't really work well if the bet sizes on the slot game would be in increments of 14.235, 18.503, 26.322 instead of 10, 15, 25 ect.

There are similar wins with lower bets. Overall, Satoshidice paid out more than the expected value to investors since the start, meaning that the bets actually generated more to investors than the expected outcome.

If the bankroll decreases further or more investors have an opinion about it, we will lower the max bet.
This is bullshit, the game designer can determine the exact RTP because they programmed it; no casino would run a game on which they did not know their exact return. You deceive investors into thinking you are employing a legitimate Kelly criterion strategy but clearly there are no fucks given about your legitimacy. It's about time SatoshiDice went the way of the dodo, you've made Erik a sad man.
legendary
Activity: 1862
Merit: 1004
January 20, 2017, 11:10:40 AM
#13
Btw, how much is the house edge for Dice?
According to their announcement thread on bitcointalk SatoshiDice's betting conditions are: "Bet options are available with up to 64,000x multiples and a house edge of only 1.9%"
But opening post of that thread wasn't edited for a long time, so the info about house edge might not be accurate anymore.
hero member
Activity: 1022
Merit: 500
January 20, 2017, 10:36:11 AM
#12
Background
As you may be aware, a user on SatoshiDice had a BIG win recently.

On January 11, 2017, Underdog01253 (user ID 2789717) placed a bet of 0.25 BTC and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC.

This bet was placed on SatoshiSlot which shares the same bankroll as SatoshiDice.


Here's the scam
SatoshiDice claims they employ the Kelly criterion to limit the maximum profit to 1.9% per bet.
Satoshi Dice keeps the maximum profit a player can make on a bet to 1.9% of the bankroll (employing the Kelly criterion).

How did they allow this user to win ~14% of the bankroll in a single bet?

If the player placed a bet of 0.25BTC and won a x1215.92 multiplier well this is not a joke amount of winning. Its a big amount of bitcoin take note not satoshi. I don't know if this is only a way of hyping the people just to seek more player to play in the games. Do you have any proof of this things?
member
Activity: 112
Merit: 10
January 20, 2017, 01:02:41 AM
#11
That is really scary if the admin decided to bet on his own site and rip off investor funds, better to invest your money somewhere else.
newbie
Activity: 47
Merit: 0
January 20, 2017, 12:45:53 AM
#10
Thanks for showing me this thread, I will never invest in SatoshiDice.
hero member
Activity: 528
Merit: 500
January 20, 2017, 12:44:00 AM
#9
Background
As you may be aware, a user on SatoshiDice had a BIG win recently.

On January 11, 2017, Underdog01253 (user ID 2789717) placed a bet of 0.25 BTC and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC.

This bet was placed on SatoshiSlot which shares the same bankroll as SatoshiDice.


Here's the scam
SatoshiDice claims they employ the Kelly criterion to limit the maximum profit to 1.9% per bet.
Satoshi Dice keeps the maximum profit a player can make on a bet to 1.9% of the bankroll (employing the Kelly criterion).

How did they allow this user to win ~14% of the bankroll in a single bet?

It is very fishy, I doubt the player is hacker or the insider rat in the site, maybe the site owner wants to scam the bankroll, you know no one would place 0.25BTC for spinning a slot, even high rollers won't gamble like this.
newbie
Activity: 24
Merit: 0
January 20, 2017, 12:23:39 AM
#8
Background
As you may be aware, a user on SatoshiDice had a BIG win recently.

On January 11, 2017, Underdog01253 (user ID 2789717) placed a bet of 0.25 BTC and won a x1215.92 multiplier to walk away with a whopping 303.73 BTC.

This bet was placed on SatoshiSlot which shares the same bankroll as SatoshiDice.


Here's the scam
SatoshiDice claims they employ the Kelly criterion to limit the maximum profit to 1.9% per bet.
Satoshi Dice keeps the maximum profit a player can make on a bet to 1.9% of the bankroll (employing the Kelly criterion).

How did they allow this user to win ~14% of the bankroll in a single bet?

its all a scam to suck more users in
hero member
Activity: 1344
Merit: 507
January 19, 2017, 10:16:57 PM
#7
The edge on the slot game is higher than on the dice, so the Kelly criterion allows higher bets.

The SatoshiSlot has a theoretical payout percentage of 96.5%. This however cannot be determined to the same precision as the dice, as in the slot the RTP/edge is calculated by a simulation, known as the "theoretical payout percentage" or RTP, "return to player".
The max bet on the slot game is not automated as on the dice, it has to be done manually. The slot game has many paylines, it doesn't really work well if the bet sizes on the slot game would be in increments of 14.235, 18.503, 26.322 instead of 10, 15, 25 ect.

There are similar wins with lower bets. Overall, Satoshidice paid out more than the expected value to investors since the start, meaning that the bets actually generated more to investors than the expected outcome.

If the bankroll decreases further or more investors have an opinion about it, we will lower the max bet.
Your story about Satoshi Slot has nothing to do with the story stated in your "Bet on the house" terms and conditions:

1) "You have the opportunity to be part of Satoshi Dice's bankroll" -> not one word about to be part of Satoshi Slot's bankroll

2) "Satoshi Dice keeps the maximum profit a player can make on a bet to 1.9% of the bankroll (employing the Kelly criterion)."

-> again not one word about Satoshi Slot

3) You: "The SatoshiSlot has a theoretical payout percentage of 96.5%" = 3,5% house edge

Not that it would play any role, but how much is the maximum profit a player can make on a bet on Satoshi Slot?

4) No Satoshi Slot terms and conditions and therefore no idea based on what investors would be part of Satoshi Slot's bankroll?

Please quote the relevant to be part of Satoshi Slot's bankroll terms and conditions?

Btw, how much is the house edge for Dice?
sr. member
Activity: 392
Merit: 250
SatoshiDice.com
January 19, 2017, 09:44:05 PM
#6
The edge on the slot game is higher than on the dice, so the Kelly criterion allows higher bets.

The SatoshiSlot has a theoretical payout percentage of 96.5%. This however cannot be determined to the same precision as the dice, as in the slot the RTP/edge is calculated by a simulation, known as the "theoretical payout percentage" or RTP, "return to player".
The max bet on the slot game is not automated as on the dice, it has to be done manually. The slot game has many paylines, it doesn't really work well if the bet sizes on the slot game would be in increments of 14.235, 18.503, 26.322 instead of 10, 15, 25 ect.

There are similar wins with lower bets. Overall, Satoshidice paid out more than the expected value to investors since the start, meaning that the bets actually generated more to investors than the expected outcome.

If the bankroll decreases further or more investors have an opinion about it, we will lower the max bet.
Pages:
Jump to: