Quote from: windice on March 20, 2019, 03:24:46 AM

Dear bitcointalk users!
We encountered a problem: a critical bug was discovered that allowed some of the players to get access to the server seed.
Unfortunately , the users didn't report the bug , but attempted to abuse it instead. Due to the fact that windice.io has instant withdrawals, our hot wallets were drained for over 3 bitcoins in total.
After we detected a suspicious activity , we temporarily turned the withdrawals off and contacted one of the exploiters , who refused to return the coins obtained by the bug abuse
and asked for a 1 bitcoin payment in exchange for cancelling his pending 2 bitcoin withdrawal and revealing the bug.
Clearly violating our Terms and conditions (12.1) : https://windice.io/terms
The bug description: 1.Server seed (secret seed) is revealed after a player changes his server seed to a new one.
2. Windice has a function to change the client seed only , without changing the server seed.
3. After the client seed was changed , due to the bug , some of the players were able to see the server seed in their past bets since it was identical to the one from the previous session.
We attach a video reproducing the bug: https://youtu.be/w0qb0GRbYmE

Due to the aforementioned , we decided to reset the sessions and/or reset the balances of the players with the following nicknames:

Code:

turok3012
luki348
Baxjniy108
Gcjeagq188
Vobhhdt101
stepan1983
drdavid58
notYou
Pdkijoq141
Xgicyra161
Hexfdcj114
Joonaa
March108
GatotKaca
jsteffa
boaler
infsps
Faris93
sanjaHimik
RainBot
divas1979
Oxiorxe133
kellyKole
Grimuar
Pechorin
Timbdawg
Vgafvcl139
Xsyahvo123
Ccsyusb119
nakamoto
Hbkexrm154
Rtnkufo151

( not all of the accounts reset abused the bug )

At the moment we turned the option to change the client seed to a custom one off . Only randomizing of the client seed is possible.
Payouts and deposits are paused for several hours until we investigate.All your deposits and balances are safe.
We apologise for the inconvenience it caused.

Windice.io team.

So sorry to see and hear. I hate abusers because actually its same scammers. Hope you will get it all back!

eugene265

Posts

Merits