Quote from: Graffiti on September 08, 2015, 04:31:54 PM

Quote from: GreydonIselmoe on September 07, 2015, 11:00:55 PM

Hey all, I'm the developer from GRFdice. Yes the coins were removed from the wallet hosted on the server. The access IP for this withdrawal (it was from the administrator panel) was the same IP c-dog used to log in to site on his own account.

The script itself was a version of coindice, from around February this year. I have been making significant improvements to it in CreditsDice.com, and it is essentially a completely different script. I've worked on multiple other projects and yes, and I would be aware of any backdoor into the code. 90% of the code is my own, while only around 10% remains as the backbone structure of the files/layout.

I've had two separate people come and attempt to gain access to multiple parts of the site, and i have paid them and patched any flaws they found.

In short, this loss was not the fault of my code, but c-dog's access point. He left a remote desktop connection server open on his PC, and had the administrator password to the site, available in a text file.

I have removed the ability to withdraw from the admin panel, therefore this issue is no longer even possible from my own administrator panel in case this were to happen to my computer, or anyone got into the panel.

I compensated some users on CreditsDice.com, which he had paid me 0.3 for. Hope this information helps! See you on Creditsdice Wink

Thanks for the update, did C-dog confirmed it to you, has him any proof that his machine got hacked, or how someone took his admin login to the site?

Quote from: tramese on September 08, 2015, 04:14:08 PM

alright guys...update, cdog has fully paid me back 8.8 btc...kudos to him

So C-dog is paying back the user who had a loss in the dice site. DId you have 8 BTC worth in graffiti in that dice?
Make this part clear.

No problem!

Yes he had 8 BTC ish of GRF, he was the primary investor.

I have received no proof from c-dog but the only information I can access and see is that his computer IP made the withdrawal from the admin panel, any information regarding how that happened, and evidence of it, needs to be provided by him.