Quote from: BitPotato on May 08, 2013, 03:44:38 AM

Now, on to more important issues. Bitpotato.com has just suffered from a small "Script Kiddie" attack. A user injected javascript into the page that replaced our wallet addresses with a single one: Li9kkpAuRLP2dXdgyxtgwDFPWE2V2s2Kzu.

Though we patched the vulnerability within minutes, they did manage to siphon away 177 LTC. We are refunding all these transactions out of pocket, due to our oversight. As we've said before, we feel our integrity is much more valuable to our business than anything else, and want to work directly with our users to improve the site, and right any wrongs that occurred due to an oversight on our end. We appreciate your continuing understanding and support.

Please, if you have sent a payment to Li9kkpAuRLP2dXdgyxtgwDFPWE2V2s2Kzu, send in a support email and get your refund! (Support email address is in the FAQ section of our website)

Also, keep the suggestions coming!
Best Regards,
The Bit Potato Staff

Very impressed with the way you handled this. Haters will hate but you run a legitimate operation.

Random suggestion: maybe a little difficult to code for, but having some type of randomized event would be fun. E.x. a special leprechaun potato pops up for a few seconds, and the leprechaun potato has a long(er?) timer and can only be clicked/purchased when it randomly appears.