Auditing A CS:GO Betting Site for Provable Fairness

Provable fairness is one of the building blocks of modern online gambling. Many Bitcoin casinos have popped up that use “provably fair” number generation algorithms. These algorithms guarantee that the numbers generated have not been influenced by either party in a way that is favorable for them. For a more detailed explanation of these systems, read this blog post. Recently, I have been introduced to the Counter-Strike: Global Offensive gambling scene. These online casinos have sprouted up from a legal loophole. Apparently, gambling with virtual items (CS:GO skins) that hold value on a market is not illegal. However, these items can be quickly traded for cash.

Many of these CS:GO gambling sites claim to be provably fair. I will be auditing these claims. In this post, I will provide a description of the provable fairness algorithm this website uses and some possible attacks that either the server or client could use. If this website had vulnerabilities that the client could exploit, the impact would be astronomical. Clients could predict the results of their rolls before they happened and use that information to only make rolls that have a favorable outcome for the client. Attacks that can be used by the server could allow the website operator to scam users and cause them to lose more than normal.

CSGOWild.com

CSGOWild has two games, I will be looking at both.

Coin Flip

CSGOWild’s coin flip game mode allows you to flip a coin against another user. Their provably fair page describes their algorithm as follows.

  1. The server generates a “salt” (this is an incorrect use of the word salt) and a “winning percentage.”
  2. The “salt” and “winning percentage” are concatenated with a : and hashed. This is the “round hash.”
  3. The “round hash” is shared with both users taking place in the game.
  4. After the game is over, the round hash and the winning percentage are shared with both users.

There are several problems with this process. The most blatant one being that the server does not take any input from the clients while creating the round hash or generating the winning percentage. The server knows which player bet on each side of the coin before it decides the winning percentage, so the server can choose which player will win before the coin is flipped. If this manipulation was combined with fake players that were playing for the house, CSGOWild could make those players win all of the bets that they made.

Roulette

CSGOWild’s roulette game does not have an entry on their Provable Fairness description page. I looked at the messages being sent over the WebSocket that the client uses to communicate with the server and found that there are no precautions being taken against the server influencing results. The server can choose any result at any time. This game mode is not provably fair at all.

5 thoughts on “Auditing A CS:GO Betting Site for Provable Fairness

  1. Agen Joker123 Terpercaya

    Entering the beginning associated with 2020, commercial companies in the digital
    sector are improving. Regarding the online gambling industry, thanks to technology it is currently easy to access betting games through your desktop or
    mobile phone. Digital entertainment these kinds of as games of which provide a lot of entertainment glimpse by the broader community.

    Betberry being a agen joker123 terpercaya in Indonesia has become one of the particular top options for
    gambling fans of every traveller. Joker123 will be the recognized company of Joker Gaming which has been founded since 2015 since the best gambling online platform provider and it has official permission to use in Asia.

    Joker sites are extremely well-liked because they usually accept the latest technology that seems to benefit typically the players.

  2. There are a lot of bookies in Indonesia who have been provoked
    to near their businesses since Indonesia adopted a feat that prohibits every forms
    of gambling. Because of this phenomenon and is supported
    by technological advances that are utterly rapid, back
    next every gambling activities are no longer carried out
    freely and without help shaped online such as online soccer
    betting or online casino.

    Progress is not without challenges, because the easier
    entrance to guidance technology, many irresponsible people
    begin to bow to advantage. Looking for allowance by scouting gambling agents and utilizing the fans of gambling off guard by scamming, fraud, phishing, etc.

    Different from Us! Our ascribed site unaccompanied gives members access to soccer gambling and
    online casino games that have been proven secure and reliable.
    Gambling games from gambling game provider sites that we offer, have a certainly fine reputation, both in terms of the system and its
    services to customers.

  3. Maha168 fixed idea Online Slot Gambling Site in Indonesia
    Of the thousands and even millions of online gambling sites in Indonesia, solitary through the Maha168 online slot site
    you will find the best slot gambling experience.
    Not unaided does it have enough money various slot gambling games
    and offers various benefits, upon this site you will
    in addition to find the most unchangeable types of
    games that come from the best slot gambling game providers
    in the world.

    Comes when a variety of fascinating features, Maha168 is the best and most trusted slot gambling agent site in Indonesia.
    Until now, there have been millions of players from all greater than Indonesia who are related every
    daylight to the games provided by this site.
    For those of you who are looking for a assistant to measure online slot
    gambling, Maha168 is the most capture choice.

  4. Ion Casino

    Ion casino is a trusted and best on-line casino site through 2010 which has served millions of gamers in Asia.
    Ion casino or also known as Ionclub is typically the top ranking selection site
    because this provides the best experience for online gambling players
    in Dalam negri. With an official license to run, this provider guarantees that players help to make bets without danger,
    credibility and can be trusted.

Leave a Reply

Your email address will not be published. Required fields are marked *