Quote from: abel1337 on January 03, 2024, 08:26:20 PM

Quote from: fapar on January 03, 2024, 07:30:03 PM

Quote from: rodskee on January 03, 2024, 08:13:33 AM

Quote from: Dunamisx on January 02, 2024, 06:11:54 PM

Quote from: Sling0 on December 31, 2023, 05:55:34 PM

How does someone go about reporting a bug to a casino a still hold casino accountable to pay a bounty?

You must first be rest assured of what you're about to report for is really a big and that your fact is established on that, then you can take every necessary steps to report such through the appropriate channel which in most cases, you're expected to go through the customers support platform to report such and then when everything is made completed and verified, you will be rewarded base on what their terms of service conditions states.

do really casino has their reward for bug finder? i don't think this is mandatory
unless they are conducting a campaign just for that event but suddenly they have not
and reporting does n0t really need to be rewarding because sometimes we are doing this
to improve their site and for us to at leash have taking from the site.

It should be beneficial for the casino to try to identify errors/problems in the operation of the website or casino software. Because the financial security and profit of the casino directly depends on this. Any sane casino will offer rewards for finding bugs for white-hat hackers and ordinary users, or even organize hackathons.

There are casinos who did bug-bounty in this forum before and I think it is way back before when I last participated on a bug hunt. To be honest it is a quite happy experience while getting rewarded by the casino. That way, you will be experiencing the full potential of the casino, it's not like a penetration testing but it is fun.

Though not every casino has an interest in doing bug hunting events, I'm guessing that most of them just hire a private group to find bugs from them rather than making the community hunt it for them.

This is actually "every medal has its reverse". That is, casinos want errors, if they exist, to be found and eliminated, and at the same time they are afraid that these errors will be used before they are published (transfered information to the casino about the existing error). In this case, of course, it is logical to hire a third-party company specializing in security, but this will incur greater costs than announcing a public bug bounty program, but at the same time it will be more reliable.