search

CoinRoster / slotmachine

fruitgame
0 stars 0 forks source link

missing money #64

Open RiskingTime opened 6 years ago

RiskingTime commented 6 years ago

user account with bitcoin address starting in n3y risk@riskingtime.com suddenly has about 0.5 bitcoins go missing from its account. I'm not sure exactly when it happened, but when I noticed I stopped the game

Patrick-Bay commented 6 years ago

I just wanted to record some initial observations on this issue.

I was able to find where the account balance changed. You can see the history around this point by pasting the following into the SQL field of phpMyAdmin:

image

SELECT * FROM `gaming`.`accounts` WHERE `index` >= 3902 AND `index` <= 3906

It's uncertain why the balance value of the account jumps here but I'm suspicious of the other account / address transaction there. Is data being shared between sessions somewhere?

I've also attached a compressed version of the game server log for this period for future exploration.

game_server.log.zip

Patrick-Bay commented 6 years ago

It seems that there's some memory sharing between sessions going on here which appears to be causing values to be mingled when they shouldn't be. This will require some intensive testing (using concurrency) to determine exactly what the conditions need to be for this issue to occur but it is almost certainly to be fixed in the game_server.js file.

Given all current knowledge I would estimate approximately 3 hours for this issue, including both testing and fixing.

Patrick-Bay commented 6 years ago

Investigate for a couple of hours and if it will take more time then pause and send feedback / findings to James.