Re: Bug Bounty on FortuneJack | Get Rewarded for Finding Bugs
Just a little note: Still waiting on payout for 2 interface bugs that were reported as reward granted on the spreadsheet.
Bug Type: Fairness
Bug Description: After looking at mines decided to turn my head to Hilo, and that was a mess. I tried to look and see if there is any place that stated how the deck array is arranged. My discovery there isn't any, so decided to look at it as if it was arranged neatly, my discovery then was again no.
This is how Stake arranges their deck:
But FortuneJack uses something vastly different and doesn't even say how it is arranged.
Take a look at this verified game: https://fjhilodemo.steadylogic.com/verify?serverSeed=6781ebb560d74627a0bdf41e148b3f2892d0b18914044e9381c6eefe8025ca0f&clientSeed=hRqfHDjAQV&nonce=1
Pic:
As you can see from the picture the card K of hearts is in index 11, but then the following K of clovers is in index 48, not even remotely close to each other as you would expect in a deck of cards.
Now what I assume they do, is have an array of cards then when 1 card is selected it is then removed from the array, so that even if the same number is picked it will still have a different card, so the array starts at length of 52.
But look at this verified game: https://fjhilodemo.steadylogic.com/verify?serverSeed=6298f5e440474453b5463adbe5bd67bff0e529541d1a4106ad478284fbfdf72d&clientSeed=hRqfHDjAQV&nonce=1
Pic:
You can see float of 46 was calculated but the site chose card 44 instead, there should have been 50 cards in the deck still at this point, why would it change. The following cards after no longer line up either, even though the number calculated is still a valid index.
In their Hilo Faq they state: "After each bet the deck is updated.", if this means the deck is randomly shuffled they have no way to prove that meaning != provably fair.
Username: lolgato
Bug Type: Fairness
Bug Description: After looking at mines decided to turn my head to Hilo, and that was a mess. I tried to look and see if there is any place that stated how the deck array is arranged. My discovery there isn't any, so decided to look at it as if it was arranged neatly, my discovery then was again no.
This is how Stake arranges their deck:
But FortuneJack uses something vastly different and doesn't even say how it is arranged.
Take a look at this verified game: https://fjhilodemo.steadylogic.com/verify?serverSeed=6781ebb560d74627a0bdf41e148b3f2892d0b18914044e9381c6eefe8025ca0f&clientSeed=hRqfHDjAQV&nonce=1
Pic:
As you can see from the picture the card K of hearts is in index 11, but then the following K of clovers is in index 48, not even remotely close to each other as you would expect in a deck of cards.
Now what I assume they do, is have an array of cards then when 1 card is selected it is then removed from the array, so that even if the same number is picked it will still have a different card, so the array starts at length of 52.
But look at this verified game: https://fjhilodemo.steadylogic.com/verify?serverSeed=6298f5e440474453b5463adbe5bd67bff0e529541d1a4106ad478284fbfdf72d&clientSeed=hRqfHDjAQV&nonce=1
Pic:
You can see float of 46 was calculated but the site chose card 44 instead, there should have been 50 cards in the deck still at this point, why would it change. The following cards after no longer line up either, even though the number calculated is still a valid index.
In their Hilo Faq they state: "After each bet the deck is updated.", if this means the deck is randomly shuffled they have no way to prove that meaning != provably fair.
Username: lolgato