Quote from: DiceMiner on September 22, 2014, 04:31:45 AM

Thank you Stunna, for the prompt reply and your level-headed approach. Also, I appreciate Dooglus' input and rebuttals to otrkid70's USELESS crosstalk. Seriously dude, WTF is up your ass?? You seem incredibly wound up for something that does not involve you at all. And to answer your question about the PREVIOUS 100-in-100-out transaction, that was 10 minutes worth of play because that's all I usually need. I won 20 BTC in that session and then I cashed out right after. I did this 3 times with 2 accounts in the past few days. I did it manually, like I always do when playing large hands. Some people don't want to spend their entire lives rolling dice or refreshing Bitcointalk, waiting on replies. Get it?!

Regarding previous questions:
  (1A) My computer is not shared, I am the sole user.
  (2A) No script or bot was used to roll.
  (3A) My PD password has never been used elsewhere.
  (4A) No new plugins or software was added before the problem transaction.
  (5A) I have scanned for malware and no threats were found. Note: I am on a Mac.

So right now, can we agree on the following:
  (1B) "1H53RfXyu59Wx3cyX8PBsJ6ZphJ5K1KGzJ" belongs to DiceMiner (my wallet address).
  (2B) "12UrtgL7XWbM6mMfZyzSgfEoVMFMDXdFta" belongs to Primedice.
  (3B) All 100 BTC were moved from PD's wallet to "1PrZQH8L7aU9qyhbgLvm4zNjfoC1wGevAs" instantly afterwards.
  (4B) Then, 21 & 29 BTC moved into "1AB5fAh4eUT3vLcYnzss5dAfuDznEbXRmT" & "1A1GYrx2qvPBr1PyqHJ5ibG6ECnJBcqey5" respectively.
  (5B) After landing in those two wallets, the entire balances were moved to "1FsVcdeHbpvUVT3gjeuVR2ZSDnpcsJMsLL" an address that has been referenced in a past scam accusation (https://bitcointalk.org/index.php?topic=744692.0). Thank you for that otrkid, that was actually useful.
  (6B) "1PrZQH8L7aU9qyhbgLvm4zNjfoC1wGevAs" , "1AB5fAh4eUT3vLcYnzss5dAfuDznEbXRmT" and "1A1GYrx2qvPBr1PyqHJ5ibG6ECnJBcqey5" do not belong to either DiceMiner or Primedice.

Some anomalies that may or may not be significant, but are certainly noteworthy:
  (1C) 0.03 BTC was mysteriously added into my PD balance recently (after the 100 BTC moved). There is no deposit shown that would account for this. Also, there has not been any recent rolling to win that amount in my absence.
  (2C) As I mentioned before, when I tried to place my first bet, the balance showed "100.0012 BTC". When I got the purple "Insufficient Funds" banner at the top, the amount still showed the same. Only after I refreshed, did the new "0 BTC" balance show.
  (3C) I have tested and it is possible to be simultaneously logged into the same PD account from multiple places. INCREDIBLY DISTURBING!
  (4C) Please view my screencapped video proving (1C):
https://www.youtube.com/watch?v=jd6itPeYcIY&list=UUe9n6OuOep645hrWmumIlyA
This will only make sense to Stunna, since he is privy to all my bet data.

My conclusions so far
   - Based on (1A) through (5A), the issue is not script or malware related.
   - (3B) and (5B) show possible forethought and deliberate action. So this is most probably not a glitch.
   - (1C) and (4C) demonstrates unauthorized activity still occurring on my account. (I don't know why somebody would deposit though...)
   - (3C) represents a DISASTROUS error in security. If somebody had your login info, they could theoretically withdraw your coins while you are playing! Perhaps this is what happened in (2C).

It is still too early to lay blame since so much is still unknown. Regardless, there are absolutely true, demonstrable problems with the site's security and accounting. One can easily test out the security issue by logging into their PD account from multiple computers or browsers at the same time. Two-factor will probably make this a non-issue soon, but it was possibly an important factor in the BS that has happened to me.

Anyhow, big thanks to Stunna for handling this like such a gentleman. Props to Dooglus and anybody else that has contributed. Sorry for the thesis...

I strongly appreciate your extremely reasonable reaction to the situation, we're going to do everything in our power to continue to investigate this. At this time I don't have reason to believe that there was any sort of breach of of your account on our side but if there was then you will be entitled to a refund. I'm going to continue to explore all possibilities with regards to this.

~~With regards to the 0.03 balance, it appears that was tipped to your account given that your tip profit is currently 0.03.~~
EDIT: The 0.03 is from our automated leaderboard daily reward, click the leaderboard tab and view the giveaway terms at the bottom.

As for the multiple location security issue, I don't feel this is an issue. The majority of services work this way as have all gambling services I've used, there aren't many websites that will lock you down to one IP or login as this could cause great inconveniences for the majority of users. 2FA will be up within 24 hours or so and should resolve this either way.

I'll be continuing my investigation tonight/tomorrow I'd like a chance to converse with you privately as well. I promise that I'm just as upset as you over this and understand that this is a substantial amount of funds and deserves a proper investigation.

I've sent you a PM so I can start gathering more information to aid the investigation.

Potential Cause
EDIT2: I also noticed you have the greasemonkey add on and need to know if you were running any scripts at the time and I'd like permission to review it if so. Greasemonkey runs scripts on site load which could have made it possible for someone to have thefted your balance. That's my current theory but I'd need more information from yourself of course. A Greasemonkey script could have withdrawn without using the UI which would have not caused the balance to lower. It's important for us to know if you are running any greasemonkey scripts at all currently even non PD ones.