Let me tell you the story of the OP on the site and his journey.
He has at least two accounts created, with one of which he made two deposits of $2 and $1.25, respectively, followed by a withdrawal of $6.27 (I assume he was testing the "terrain").
Shortly after, he made a deposit of $6.27 and withdrew $140.75 (probably checking if a slightly larger withdrawal would be approved and was approved).
True
His next deposit was $30.20, and he withdrew $554.52 (at this point, his account was automatically blocked from making withdrawals, as the wallet detected an anomaly).
True
When he saw that this withdrawal wasn't approved, he contacted us via live support a few hours later. The support agent explained the situation to him and the reason for his block, namely that he abused and exploited a vulnerability.
The recordings and all the screenshots were taken after he realized that we had detected this issue. He made an enormous wager and caused many problems on the site. We resolved the issues and blocked him from taking any further actions on the site.
Sure
After all these events, this thread appeared. I want to mention that neither I or anyone else from the Cryptoplay team was contacted to be informed about a vulnerability.
This is the real story, and it is evident that his actions were premeditated with the intent to defraud.
Hmm...
This is the real story, but its only one side of it.
The real question is, who is the bigger scammer?
The guy who took 100$ or the guy running a rigged casino for over 4 years.
* Definitely not saying I was right in doing that, but then again, if I just reported it and got shut up with the bounty money then nobody would've been aware it's rigged. Yes, I did try to withdraw money instead of reporting it, but I am not making this thread specifically because you declined my withdraw.
* As I stated at the very start, I am not writing random yammer because I lost money. I didn't lose money.
I was thinking about this and collecting evidence pretty much from the start.
The back and forth here is very much:
-> *very convincing proof it's rigged*
-> "It's a glitch! Nuh uh!"
We're like 4 replies in and you have really said a whole lot of nothing.
But to be honest, what even is there to say?
The evidence I provided is almost undeniable, there is no way this is happening because of a glitch.
For anyone else reading, this was the exploit:- Seeds on the site took a long-ish amount of time to rotate, maybe like 3 seconds
- Site also uses a system where your next seed is pre-determined, seen where you can read 'Next Server Seed'
1. Send the seed change request twice at the exact same times (race condition)
2. Run a loop which plays dice games in a 100ms interval
3. You will see in the requests that the same seed has been generated/given twice.
4. Check dice history and you may find that one of the early dice games from your interval has had it's seed uncovered.
5. Match server seed hash from dice game to current, unhashed, seed.
6. Bingo.
Some things just to get straight:
1. Games with this seed are 100% verifiable as long as rigging didn't take place2. Games that don't get rigged are verifiable 100% of the time and can be played to the maximum win (towers, dice, hilo) * Which is why my balance is so high in the videos3. The site knows perfectly well which seed to use, as the nonce goes up accordingly and the same seed was made twice anyway, no confusion.4. This site is riggedKind regards