+- Hack Forums (https://hackforums.net)
+-- Forum: Money (https://hackforums.net/forumdisplay.php?fid=241)
+--- Forum: Crypto Currency (https://hackforums.net/forumdisplay.php?fid=380)
+--- Thread: [OMC] OMC Robbery from Omnichain Casino (/showthread.php?tid=4812578)
OMC Robbery from Omnichain Casino - Abraham Lincoln - May 8, 2015
While setting up the blackjack script on the Omnicoin casino, I went in to check on the dice script. While doing so I noticed that some of the balance stats didn't seem quite right. The user account balance was a negative amount. After running some quick queries on the database, I found that there were multiple accounts with negative balances. I figured someone found a way to withdraw more than was in their account. A quick check to the logs confirmed this.
After doing some investigation, I've determined that over the course of the past month, someone has siphoned off 22,747.01821024 OMC from the wallet. Since the attacker didn't fully empty the wallet each time, the account balances didn't go ever negative and so I never suspected an issue, until yesterday.
I had a bad feeling about running a 3rd party script like this, but I just hoped for the best. I should have taken the use of functions 3 years+ deprecated and the horrible code as a warning that the script shouldn't be trusted, but instead I just updated the obvious things and went with it.
I won't be running a third party script like this ever again. Especially not one with this bad of a reputation. I'll be spending the new few days creating a new provably fair blackjack game. I'm not going to trust the current one, even though I haven't had an issue yet. I'm not sure what I'll do about the dice game. I might remake it, I might not. It depends on if anyone wants to play it.
The 23K OMC will be coming from my pocket. No one else will lose anything. I'll set something up so you can claim any deposits you had. This doesn't effect the pool or online wallet. Those are completely different systems running in isolated environments.
I've got quite a few IPs and addresses that I can look into, but I doubt I'll find anything to link me back to the attacker. It was probably someone from this community though. It's sad, but that's the way the game goes.
Lastly I want to give a thanks to the users who have donated to help cover the stolen funds:
$10 BTC - bloodhawkbh
1,000 OMC - Justin Timberlake
* - PedoOpa - May 8, 2015
Ohh well thats sad...
How much is that aprox? (23K OMC)
He should have reported it and improved it...
* - Jokeh - May 8, 2015
Good to see you're repaying the people who lost there omc!
(May 8, 2015 01:16 PM)PedoOpa Wrote: Ohh well thats sad...
How much is that aprox? (23K OMC)
He should have reported it and improved it...
56.2560634
rates can be found at http://omc-rates.com/
* - Juicy - May 8, 2015
At least it was only 23,000. While still a hit, it could have been much worse.
* - Abraham Lincoln - May 8, 2015
(May 8, 2015 01:16 PM)Jokeh Wrote: Good to see you're repaying the people who lost there omc!
Technically no one else lost any OMC. Their balances were still there. All the OMC came from my extra balance that I keep there in case someone wins big.
* - Hire - May 8, 2015
Lol, 23k OMC gone.
And that's why i'd rather use BTC and play on PrimeDice. Like, it's a great idea, but it's prob better to start off with an already existing script, with small tweaking.
* - Abraham Lincoln - May 8, 2015
(May 8, 2015 01:17 PM)Juicy- Wrote: At least it was only 23,000. While still a hit, it could have been much worse.
Yep. I'm glad I figured out were all my OMC was going. I put in 25K in the last month :P
(May 8, 2015 01:18 PM)Syndra Wrote: Lol, 23k OMC gone.
And that's why i'd rather use BTC and play on PrimeDice. Like, it's a great idea, but it's prob better to start off with an already existing script, with small tweaking.
BTC isn't any safer than OMC in that respect.
And you should read the thread. This all happened because I started with an already existing script that I tweaked.
* - Juicy - May 8, 2015
(May 8, 2015 01:19 PM)Abraham Lincoln Wrote: Yep. I'm glad I figured out were all my OMC was going. I put in 25K in the last month :P
Sad to see it happened to you though, when you were just trying to set up a fun way to bet omc.
I was going to start using it this week, as I love blackjack.
* - Abraham Lincoln - May 8, 2015
(May 8, 2015 01:20 PM)Juicy- Wrote: Sad to see it happened to you though, when you were just trying to set up a fun way to bet omc.
I was going to start using it this week, as I love blackjack.
Yea, I was hoping I could keep this script up for awhile. Now I'll have to write something 😟
* - brian188246 - May 8, 2015
Blackjack gone :(
I think you should put it back up :D
* - Juicy - May 8, 2015
(May 8, 2015 01:22 PM)Abraham Lincoln Wrote: Yea, I was hoping I could keep this script up for awhile. Now I'll have to write something 😟
So the casino is coming back though? 🤗
* - VRUMM - May 8, 2015
U cant compare my updated $300 blackjack script to ur script u found online for free -___-
* - Abraham Lincoln - May 8, 2015
(May 8, 2015 01:22 PM)brian188246 Wrote: Blackjack gone :(
I think you should put it back up :D
Nah, I don't trust it. It's from the same clueless coder. I don't want to make the same mistake twice.
(May 8, 2015 01:22 PM)Juicy- Wrote: So the casino is coming back though? 🤗
Yes, at least the blackjack is. Maybe dice as well. Maybe even some new games
* - 4158996621556 - May 8, 2015
rip over 9000 omnicoins.... may you be remembered
* - Yoshikage Kira - May 8, 2015
Sorry for your loss op, mind posting the addresses he/she withdrew to?