it was a timing attack, seems like if you ddos and repeatedly call the withdraw link you can get double and triple witdrawals through even though you do not have enough funds in your account...
the dice game was drained complely... same with wheel of fortune
i have now patched it, and each...