Elite Ranks Dice bot provably (not) fair v3

[Dorkinator]

So I decided to verify their site none of the linked verification methods work. Their site also doesn't let you change your client seed. I wouldn't report this if this was the first time they've done it, but they're using Sythe to convert people to their services which are all imitating provably fair sites. Their services are very deceptive and designed to confuse laymen.

Even the quote at the bottom of their page is incorrect. I wrote an implementation to this spec and I doubt that myself and every other dice verifying site that they link through to are incorrect.

Elite Ranks - #1 Runescape Gambling Site

To create a roll number, we use a multi-step process to create a roll number 0-99.99. Both client and server seeds and a nonce are combined with hmac-sha256(server_seed, client_seed-nonce) which will generate a hex string. The nonce is the # of bets you made with the current seed pair. First five characters are taken from the hex string to create a roll number that is 0-1,048,575. If the roll number is over 999,999, the process is repeated with the next five characters skipping the previous set. This is done until a number less than 1,000,000 is achieved. In the astronomically unlikely event that all possible 5 character combinations are greater, 99.99 is used as the roll number. The resulting number 0-999,999 is applied a modulus of 10^4, to obtain a roll number 0-9999, and divided by 10^2 to result a 0-99.99 number.

As an aside if you're wondering why I even found their site they idiot @'d me in discord when I was looking for a btc to agc site, lo and behold they are 0/3 for implementing provably fair correctly. I'm fairly certain at this point it's malicious in nature and not ignorance.


Previous scam reports for the same reason
https://www.sythe.org/threads/elite-ranks-dice-bot-provably-not-fair
https://www.sythe.org/threads/3170257/resolved

@Owner

 

I have dmed Shin before site even went live and he said it looks fine. So I will let staff review this again.

http://prntscr.com/k6ced1
http://prntscr.com/k6ceez
http://prntscr.com/k6cegz

 

[Pendulum]

Hello @Owner

After reviewing this initially (this will be discussed with other staff members as well) there are a few issues that are being pointed out.

1. Your site is not allowing users to change their client seed. In order for this to be provably fair, each party must have control of one input.
2. The 'Generate New Seed' (sever seed) button is misleading, as users need to be able to pick them and without that, a server can optimize it.
3. The sites you have linked to verify the rolls are not actually verifying them.

Feel free to add me on Discord to discuss, Blue#8012.

 

[Shin]

I have dmed Shin before site even went live and he said it looks fine. So I will let staff review this again.

http://prntscr.com/k6ced1
http://prntscr.com/k6ceez
http://prntscr.com/k6cegz

You messaged one day sending screenshots similar to the above and asked if I could review it real quick and see if you can advertise provably fair. You said it had all the parts that were missing previously and I could see everything was there/available, but I wasn't aware bettors couldn't set their own client seed. I was never asked to test anything and never made any announcement stating everything was okay. This is due to not wanting to do work for other people they should be capable of doing themselves and it can give users the wrong impression if I were to make any such statement without proper testing. Saying everything looks fine and the system actually being fully operational are two completely different things. Instead of trying to use my name, I'd advise you to ask your programmer why they're dropping ball on you, because I'm certainly not responsible for any of it.

 

Hello @Owner

After reviewing this initially (this will be discussed with other staff members as well) there are a few issues that are being pointed out.

1. Your site is not allowing users to change their client seed. In order for this to be provably fair, each party must have control of one input.
2. The 'Generate New Seed' (sever seed) button is misleading, as users need to be able to pick them and without that, a server can optimize it.
3. The sites you have linked to verify the rolls are not actually verifying them.

Feel free to add me on Discord to discuss, Blue#8012.

I will resolve this asap.

 

[Pendulum]

This has seemingly been resolved.