Post
Topic
Board Announcements (Altcoins)
Re: [ANN][CLAM] CLAMs, Proof-Of-Chain, Proof-Of-Working-Stake, a.k.a. "Clamcoin"
by
edmundduke
on 08/12/2015, 10:15:49 UTC
Clam has been added to https://alterdice.com for betting and recently to our new exchange. Bringing us to 12 supported currencies.

That's great. I just tried the site out and was able to turn 400 satoshis into over 6 BTC exploiting a bug that a lot of new dice sites have.

Here's the relevant line from your provably fair verification code:

Code:
hashed_result   = hashlib.sha512(str(seed_server) + str(seed_client) + str(roll_number)).hexdigest()

Stringing the client seed together with the roll number like that lets me make the same rolls twice: "x1"+"2" == "x" + "12"...

(I reported this to the owner privately and he already shut the betting down to implement a fix, so don't bother trying to exploit it).


I was just about to see what the new site is about when i got an error "Can't establish a connection to the server" and looks like the answer why it happened is right here.
That was a really fast find, well done doog. You most likely saved the owner a lot of headache.