Hey all, I'm the developer from GRFdice. Yes the coins were removed from the wallet hosted on the server. The access IP for this withdrawal (it was from the administrator panel) was the same IP c-dog used to log in to site on his own account.
The script itself was a version of coindice, from around February this year. I have been making significant improvements to it in CreditsDice.com, and it is essentially a completely different script. I've worked on multiple other projects and yes, and I would be aware of any backdoor into the code. 90% of the code is my own, while only around 10% remains as the backbone structure of the files/layout.
I've had two separate people come and attempt to gain access to multiple parts of the site, and i have paid them and patched any flaws they found.
In short, this loss was not the fault of my code, but c-dog's access point. He left a remote desktop connection server open on his PC, and had the administrator password to the site, available in a text file.
I have removed the ability to withdraw from the admin panel, therefore this issue is no longer even possible from my own administrator panel in case this were to happen to my computer, or anyone got into the panel.
I compensated some users on CreditsDice.com, which he had paid me 0.3 for. Hope this information helps! See you on Creditsdice

Thanks for the update, did C-dog confirmed it to you, has him any proof that his machine got hacked, or how someone took his admin login to the site?
So C-dog is paying back the user who had a loss in the dice site. DId you have 8 BTC worth in graffiti in that dice?
Make this part clear.