Quote from: seoincorporation on March 07, 2024, 04:48:46 PM

Today i tested the casino and would like to report some bugs:

1.- under https://bitroul.com/provably-fair

Please enter the number of the round :
The - and . symbol shouldn't be allowed. It should be sanitized to only allow positive integers, it even allows inputs like "24-3"

2.- The client seed area should be only letters and numbers, as you can see, it allows any character, this way hackers could do some SQL injection or JS injection.

3.- When we place a bet and it's finished, then we move to provably fair, and verify some previous bets, when we come back to the game, it doesn't recognize the bets on the board as you can see in the next image:

4.- If we place a bet, when the animation start we move to the Provably Fair tab, then we get back and the animation gets weird, and the ball moves in a vertical way, and the ball always ends in the same position between 17 and 34.

5.- When you make a deposit, user should not input the amount, the site should only provide a depo address and read the amount when the depo gets confirmed.

I selected a 0.1 deposit on the site and send 0.01 LTC:
https://litecoin.atomicwallet.io/tx/9d3cd3d814eea795f0e3b36d108c78de86ad93cf523cfe3e577bbd312496fde4
Never get the deposit

Update about my depo:

I get 2 mails:

Quote

Hello,

We have received only 0.01000000 of the 0.10000000 LTC for transaction CPIC2OISQPRK00VYAWAYD9V4UU to Bitroule leaving a remaining balance of 0.09000000 LTC. This can happen if you forgot to account for the coin TX fee when sending to us or if you are using a coin that only allows 6 digits after the decimal and didn't round up to the 6th digit.

If you have already sent the outstanding balance of 0.09000000 LTC, you can safely ignore this email.

To complete this transaction send 0.09000000 LTC to MKoGBzshK1YdpX8BMZS2rxRJD7rKffNDub

If you don't send the remaining funds you will receive an email after the payment times out to claim your funds if it is at least the network send fee times two.

You can view the status of this payment or leave feedback for the seller for the next 30 days at https://gocps.net/9z66952q0xxvl7y1455m7b1nk/

Thank you,
CoinPayments.net
Support is available at: https://www.coinpayments.net/help-support

And then the second one:

Quote

Hello,

Your payment of 0.10000000 LTC to Bitroule has timed out without us receiving the required funds.

The transaction with ID CPIC2OISQPRK00VYAWAYD9V4UU has been cancelled.

If you sent funds that didn't confirm in time to complete the transaction, they will still need confirmation on the blockchain and be at least the network send fee times two before we can return them to you. Only after they have been confirmed on the blockchain will you receive an email within 8 hours with a link to claim the refund.

If you don't receive the email 8 hours AFTER getting confirmations or need any help or assistance feel free to contact us at https://www.coinpayments.net/help-support

So, i will have to wait some hours to recover the 0.01LTC, i mean, it was for testing proposes and it wouldn't hurt if i can't recover them, but i don't like at all the deposit system managed by a 3rd party.

interesting .

Thank you for the test .

Well , about hacking with some special characters inside the client seed ... no comment , I dont think so but ok . we take the remark .
About the point 4 , We try ro reproduce it .
About point 5 : yes it works like this . because the third party works like this . No money is lost , thats the principal thing .
The conterpart of using a third party for the payments is that it is fairly safe and reliable . Much more than an in house wallet system .

I appreciated your move .