Post
Topic
Board Announcements (Altcoins)
Re: [ANN][CLAM] CLAMs, Proof-Of-Chain, Proof-Of-Working-Stake, a.k.a. "Clamcoin"
by
Kefkius
on 08/12/2015, 10:52:39 UTC
Clam has been added to https://alterdice.com for betting and recently to our new exchange. Bringing us to 12 supported currencies.

That's great. I just tried the site out and was able to turn 400 satoshis into over 6 BTC exploiting a bug that a lot of new dice sites have.

Here's the relevant line from your provably fair verification code:

Code:
hashed_result   = hashlib.sha512(str(seed_server) + str(seed_client) + str(roll_number)).hexdigest()

Stringing the client seed together with the roll number like that lets me make the same rolls twice: "x1"+"2" == "x" + "12"...

(I reported this to the owner privately and he already shut the betting down to implement a fix, so don't bother trying to exploit it).


Sounds like adding Clam was a great decision, alterdicecom. It could have been someone with less integrity finding that vulnerability.