Skip to content

A Proof of Concept for exploiting Stake.com seed rotation via race-condition vulnerability in Mines, Coinflip & Crash using concurrent WebSocket sessions, nonce flooding, and intercepted hash derivation.

License

Notifications You must be signed in to change notification settings

raidcord/stake-exploit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Stake Seed Rotation Exploit PoC v2.23

Build Status Version License Node.js

A Proof of Concept for exploiting Stake.com seed rotation via race-condition vulnerability in Mines, Coinflip & Crash using concurrent WebSocket sessions, nonce flooding, and intercepted hash derivation.

Educational Use Only


🚀 Quick Install

Requirements:

  • Node.js 18+
  • npm
# 1. Clone repo
git clone https://github.com/raidcord/stake-exploit.git
cd stake-exploit

# 2. Install dependencies
npm install

🔮 Usage When you run the exploit engine, it will boot with a startup sequence, then ask for parameters via CLI: Game Choice → 1 for Mines, 2 for Coinflip, 3 for Crash Client Seed → Get from Stake (Game → Fairness → Copy) Server Seed → Optional (uses live intercept if blank) Number of Games → How many predictions ahead

Example: Mines Prediction

node index.js
Select Game: 1 ( 1 for mines 2 for coinflip )
Enter Client Seed: Your_Active_Client_Seed
Enter Server Seed Hash: Hash_Of_The_Current_Server_Seed
Enter Nonce: 0

[ ✓ ] [ ✓ ] [ X ] [ ✓ ] [ ✓ ]
...
Recommendation: Pick ✓, avoid X

Example: Coinflip Prediction

node index.js

Select Game: 2 ( 1 for mine 2 for coinflip )
Enter Client Seed: Your_Active_Client_Seed
Enter Server Seed Hash: Hash_Of_The_Current_Server_Seed
Enter Nonce: 0

Nonce 0: Heads (82%)
Nonce 1: Heads (71%)
...

Example:

```python-repl
Nonce 0: Heads (82%)
Nonce 1: Heads (71%)
  • 📜 License MIT — see LICENSE.

About

A Proof of Concept for exploiting Stake.com seed rotation via race-condition vulnerability in Mines, Coinflip & Crash using concurrent WebSocket sessions, nonce flooding, and intercepted hash derivation.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published