It's honestly a shame that I even have to make this thread because I actually really like Rollbit's overall product.
However, my problem isn't with the product, it's with the people who run it.
Yes, I know I probably have Stockholm Syndrome...
First Incident:
Back in early November 2023, I observed suspicious patterns between a few players on Rollbit's "Recent High Roller Bets" page. This lead me to stumble upon a bug/exploit on a game that significantly increased a player's RTP when certain protocols were followed, similar to an Easter Egg in a video game...
After observing the patterns of the same players and running more tests, I found this to be replicable on around 5 other games from the same provider. I then reported it to Rollbit's Staff via the chatbox as well as their Discord server on multiple separate occasions. I have a partial screenshot of the Discord interaction below, but I didn't think to screenshot the chatbox because I was told that somebody would contact me. Nobody ever did contact me anyways.
About 10 days went by since my initial report, it's now the 20th or 21st. In between this time, Staff acted oblivious to it and always avoided interaction whenever I'd mention it. I figured at this point that they weren't able to replicate it and probably saw me as "The Boy Who Cried Wolf". So, I went to try and replicate it with video evidence, but I saw that the provider had been removed. I checked Rollbit's Twitter & Discord to see if they made an announcement and I asked staff members in the Discord—they again avoided the subject. I thought this was odd, so, I decided to contact a founder to look for answers... I attached images of our correspondence below.
1. https://i.ibb.co/PgmNWC4/1.png
- This image is my initial message where I mentioned the bug describe previously as well as something else I found.
2. https://i.ibb.co/GkPmhzq/1-3.png
- I was denied a bug bounty because "the damage had already been done" and apparently they had found it within their own investigation... of what, the multiple reports I made prior?
- This is me showing that I did report it to a staff member back on the 13th. In the screenshot, I explain that part of the message was deleted by staff and another part by me for opsec reasons. Using inference, you can get an idea of what I'm saying is accurate. What's even worse is that the staff member just posts an image of Pepe when responding to a critical level bug.
- It took me only about 30 minutes to an hour to get a good understanding of how to do the bug on all 5 of the games. Why did it take them roughly 10 days to take action? If the damage was that bad to where you can't even hook a dude up for reporting such a bug, why would you not take action immediately? That makes no sense to me. It's almost as if he's lying and trying to put blame somewhere else (this is a common occurrence with the Rollbit staff)
Second Incident:
Since Rollbit was being unfair, I went to Stake and reported the same thing. I mentioned everything to the guy at Stake, even about how Rollbit was acting toward the situation.
What does Stake do?
- https://i.ibb.co/L02R4kX/2024-02-18-10-04-14-Window.png
- The Stake guys really went to one of their competitors and asked about the validity of my claim... That's the most absurd idea I've ever heard, of course they would deny my claims, because it wouldn't make them look good....
https://i.ibb.co/mtWsjJV/2024-02-18-10-15-29-Window.png
- This is Stake's reasoning for not further reviewing my reports. They stated that they never even tested it out and instead used preliminary checks to see if what I was saying was valid. I explained to their staff that this exploit and the way it was structured seems more like an Easter Egg, almost as if it was intentionally intentionally....
Ongoing Incident:
- I'm not going to mention too much about this as it's ongoing, but it's pretty serious...
https://i.ibb.co/SPQMp7M/2024-02-18-10-58-40-Window.png
- Here, I was given the Rollbit Deluxe Special: 1 Security Incident, minus bug bounty payout, add a side of deflection...
- I mention to Rollbit that this has everything to do with Rollbit and they clearly have some kind of problem with me. They go quiet.
- Because of this, I self-exclude from the website. I'm not going to help a site improve if they're just going to take all of my money, shit on me as much as possible, and not take me seriously.
https://i.ibb.co/0GkrSnL/2024-02-18-11-02-00-Window.png
- The next morning, I receive an email very early in the morning from Razer, the founder, stating how he deposited a loyalty bonus in my account and that they'll keep me updated.
- This is clearly them lowkey taunting me and baiting me to help them out. Razer knows that I was self-excluded, yet he still deposited the money on an account I can't even access. They pretend to not have the ability to unban me.
- Because of how Rollbit has been to me in the past, I assume they're going to act all nice and wait for me to fix the problem via the third-party company then ban me with whatever unknown amount of money the bonus is.
There's more than this, but I'm kinda tired of being reminded of all of the bullshit encounters I have had with them.
However, my problem isn't with the product, it's with the people who run it.
Yes, I know I probably have Stockholm Syndrome...
First Incident:
Back in early November 2023, I observed suspicious patterns between a few players on Rollbit's "Recent High Roller Bets" page. This lead me to stumble upon a bug/exploit on a game that significantly increased a player's RTP when certain protocols were followed, similar to an Easter Egg in a video game...
After observing the patterns of the same players and running more tests, I found this to be replicable on around 5 other games from the same provider. I then reported it to Rollbit's Staff via the chatbox as well as their Discord server on multiple separate occasions. I have a partial screenshot of the Discord interaction below, but I didn't think to screenshot the chatbox because I was told that somebody would contact me. Nobody ever did contact me anyways.
About 10 days went by since my initial report, it's now the 20th or 21st. In between this time, Staff acted oblivious to it and always avoided interaction whenever I'd mention it. I figured at this point that they weren't able to replicate it and probably saw me as "The Boy Who Cried Wolf". So, I went to try and replicate it with video evidence, but I saw that the provider had been removed. I checked Rollbit's Twitter & Discord to see if they made an announcement and I asked staff members in the Discord—they again avoided the subject. I thought this was odd, so, I decided to contact a founder to look for answers... I attached images of our correspondence below.
1. https://i.ibb.co/PgmNWC4/1.png
- This image is my initial message where I mentioned the bug describe previously as well as something else I found.
2. https://i.ibb.co/GkPmhzq/1-3.png
- I was denied a bug bounty because "the damage had already been done" and apparently they had found it within their own investigation... of what, the multiple reports I made prior?
- This is me showing that I did report it to a staff member back on the 13th. In the screenshot, I explain that part of the message was deleted by staff and another part by me for opsec reasons. Using inference, you can get an idea of what I'm saying is accurate. What's even worse is that the staff member just posts an image of Pepe when responding to a critical level bug.
- It took me only about 30 minutes to an hour to get a good understanding of how to do the bug on all 5 of the games. Why did it take them roughly 10 days to take action? If the damage was that bad to where you can't even hook a dude up for reporting such a bug, why would you not take action immediately? That makes no sense to me. It's almost as if he's lying and trying to put blame somewhere else (this is a common occurrence with the Rollbit staff)
Second Incident:
Since Rollbit was being unfair, I went to Stake and reported the same thing. I mentioned everything to the guy at Stake, even about how Rollbit was acting toward the situation.
What does Stake do?
- https://i.ibb.co/L02R4kX/2024-02-18-10-04-14-Window.png
- The Stake guys really went to one of their competitors and asked about the validity of my claim... That's the most absurd idea I've ever heard, of course they would deny my claims, because it wouldn't make them look good....
https://i.ibb.co/mtWsjJV/2024-02-18-10-15-29-Window.png
- This is Stake's reasoning for not further reviewing my reports. They stated that they never even tested it out and instead used preliminary checks to see if what I was saying was valid. I explained to their staff that this exploit and the way it was structured seems more like an Easter Egg, almost as if it was intentionally intentionally....
Ongoing Incident:
- I'm not going to mention too much about this as it's ongoing, but it's pretty serious...
https://i.ibb.co/SPQMp7M/2024-02-18-10-58-40-Window.png
- Here, I was given the Rollbit Deluxe Special: 1 Security Incident, minus bug bounty payout, add a side of deflection...
- I mention to Rollbit that this has everything to do with Rollbit and they clearly have some kind of problem with me. They go quiet.
- Because of this, I self-exclude from the website. I'm not going to help a site improve if they're just going to take all of my money, shit on me as much as possible, and not take me seriously.
https://i.ibb.co/0GkrSnL/2024-02-18-11-02-00-Window.png
- The next morning, I receive an email very early in the morning from Razer, the founder, stating how he deposited a loyalty bonus in my account and that they'll keep me updated.
- This is clearly them lowkey taunting me and baiting me to help them out. Razer knows that I was self-excluded, yet he still deposited the money on an account I can't even access. They pretend to not have the ability to unban me.
- Because of how Rollbit has been to me in the past, I assume they're going to act all nice and wait for me to fix the problem via the third-party company then ban me with whatever unknown amount of money the bonus is.
There's more than this, but I'm kinda tired of being reminded of all of the bullshit encounters I have had with them.