Quote from: kurtbitcoin on Today at 11:48:18 AM

Quote from: lemarin2 on Today at 10:08:45 AM

Hello Kurt ?

  Thanks for your sweet words .

  About your bug , I propose the community of Bitcointalk to be escrow and the judge .

  You explain the bug and the proofs , I give my advice , you can answer , and finally we decide if you qualify or not and the community is witnessing .

  About how much is it valuable i would say that 500 usd is the maximum : a systemic bug .
  An average bug will be rewarded 150 usd .


BTW I don't understand why you signal a bug at the advantage of the client , and in the end of your message you deter people from playing BitRoul threatening them of losses .
  puzzling Roll Eyes

BUG IN PROVABLY FAIR FEATURE

The bug: Each time you change your client seed, the unhashed server seed is revealed in the response from your server sent to the browser.

Proof:

I change my clientseed to kurtfoundabug00 in the option provided.
It changes successfully and this response is sent to browser.

link:https://imgur.com/a/3G9Upib

As you can see the noramlServerSeed shows the unhashed server seed.

I then take that serverseed and put it together with my client seed and the time I plan to press the spin button and SHA512 hash it.

link: https://imgur.com/CcxMYIZ

I then take the hash and convert it to decimal , 2 by 2

link:https://imgur.com/a/JruDlOM

I then wait for the time to be 1 second as planned and press the spin button so that the time can be accurate.

Here is the spin Result

link: https://imgur.com/epOkzsV

provably fair:

link: https://imgur.com/a/PfszM9A

More Proof

Look at round 65, I haven't played it yet. The hashed seed is given and my clientseed changed to kurtfoundabug001.

link:https://imgur.com/a/nuVxTyA

The unhashed serverseed is already in my possession.

link: https://imgur.com/a/Tm30lQl

If you woud like to have more proof, I can provide it to you.

My bitcoin address is bc1q5staxrlprpn7x5ly9k88g5xr8tzf24ve8l32nj

I wanted to make everything neat and clear but it seems I can't post images