Hacker steals over 44000 EOS from EOSbet bankroll

EOS based decentralized application, EOSbet suffered a major attack today that resulted in the loss of over 44000 EOS from their bankroll. The hacker used a bug in the app to make the EOSbet bankroll account eosbetdice11 to send EOS transfers to his own account aabbccddeefg.

The malicious transfers are public and can be viewed in a block explorer. The blockchain also shows that the hacker has transfered 10,000 EOS to account cctvworldcup and another 10,000 EOS to account guydgnjygige. At the time of writing this post, his main account aabbccddeefg had 24,435 EOS in it.

A few days earlier, EOSBet claimed that they have the best developers for EOS based dice games. Their official twitter handle tweeted:

DEOS Games, a clone and competitor of our dice game, has suffered a severe hack today that drained their bankroll. As of now every single dice game and clone site has been hacked. We have the biggest bankroll, the best developers, and a superior UI. Play on #EOSBET. #EOS

But it appears that their “best developers” weren’t able to prevent this large scale attack. EOSbet dice’s main site has been taken down and trying to access the site shows the following message:

Sorry for the inconvenience, but our site has been shut down while we ensure our smart contract is safe and secure.

Crosspost.