Quote from: SatoshiDICE_PR on January 20, 2017, 02:52:55 AM

Quote from: game-protect on January 20, 2017, 01:53:39 AM

Quote from: SatoshiDICE_PR on January 20, 2017, 12:55:25 AM

We are continuously working to figure out what has happened regarding the reports of the missing bitcoins.

You can see within one day what happened on your gaming server in regards to a certain account.

We have time stamp of a login with the correct password that made a successful withdrawal on both accounts, that we looked up in a few minutes.
One of the things we are looking into is if there are one or several phishing attempts, what they look like, how many accounts could have been affected, tricked by the phishing. Is it even a phishing or did someone get hold of all passwords, or some passwords, or is it a list of user accounts from other websites and so on - its not exactly a one day thing.

Whats time consuming is:
What we are trying to figure out is if the fault is ours OR If the user simply did not have a secure password or used the same password as they did on other websites, ect ect.
If the site or servers have been compromised, we will refund the user accounts in question.
OR
If the user got his password typed in by inputting the password in the password field as intended we will not refund.

A 2 factor authentication system would have eliminated this problem and should probably have been implemented a long time ago. As much as we are now rushing to develop this feature, At this moment the site is as provided without 2 factor authentication.

So you need weeks to check if your server has been compromised?

Everything what happened on your server (login attempts, successful logins, code added, etc.) is recorded and your server administrator can easily check this within a few days.

If you were not compromised and if it was not an inside job, you could simply put the server logs on the table.

There are several indications that your server was compromised and you try to cover it up:

1) Shortly after your issues (account balances disappeared, hot wallet regularly empty, etc.) 2 players coincidentally win 500+ bitcoins with Satoshi Slots, would perfectly explain that your server was compromised and covered your loss with the 500+ Bitcoins won and reduced this amount from investor account balances.

2) Allow players to win more than the maximum profit on a bet of 1,9% of the bankroll and this contradictory to your "Bet on the house" terms and conditions.

3) The Satoshi Slot winners can withdraw their illegal winnings of 500+ Bitcoins instantly, while "normal" customers have issues to even withdraw 1 Bitcoin.

4) Player account transactions are not secured with email account confirmations, strongly suggest that the security of your server is also not sufficient.

5) Illegaly reduce Satoshi Slot losses from investor account balances, even though they only invested in Satoshi Dice, according to your "Bet on the house" terms and conditions.