Protect Your Account!

On Wednesday October 23 an attacker used a list of usernames and passwords to attempt to log in to Just-Dice accounts. Most of the user names didn't correspond to accounts on Just-Dice but a few did.

16 Just-Dice accounts had BTC withdrawn from them by an attacker. The attacker was able to withdraw from accounts that either had no 2fa set up, or those that had it disabled for divesting and withdrawing. There have been reports that some accounts had their 2fa set up to disallow withdrawals, but not to divest and bet. At least one user has reportedly had his investment gambled away.

We encourage all of our users to take advantage of the extra security 2fa provides for your account, and remind you all to use unique passwords for every site that you use.

There has been a rally of users on chat and all of the smaller losses have been repaid via donations from other users. The address to donate to help get some of the larger amounts back to the victims of this attack is 1GbDrpVNGxC8CxfZrYMPVPZ2KNwvcXEHT7

Here is a list taken from chat of the amounts stolen and the amounts which will be paid out.

 stolen amounts: 0.00018560 0.00069031 0.00930999 0.00990000 0.01006117 0.01137880 0.01773303 0.02915000 0.04515912 0.04542498 0.04976687 0.08471695 0.60705816 0.88197790 3.87314367 60.07364941

 payouts to come: 0.00018560 0.00069031 0.00930999 0.00990000 0.01006117 0.01137880 0.01773303 0.02915000 0.04515912 0.04542498 0.04976687 0.08471695 0.45419461 0.45419461 0.45419461 0.45419461