Article on Jack Maller
Jack Mallers’ Strike denied an email breach that definitely happened
11:25 AM • Nov 01, 2023
Crypto, Jack Mallers, Payments, Strikeby Protos Staff
Share
On Tuesday, Jack Mallers’ Bitcoin-focused payments app Strike responded to a media inquiry about a customer database breach, saying, “There’s no evidence that Strike was breached.” However, within minutes, crypto researcher ZachXBT had posted evidence of the breach in a Telegram channel, and within hours, Strike admitted to customers that its email list was indeed breached by a third party.
The incident isn’t the first time that Strike and its CEO Mallers have misled the public about the reality of the company’s operations.
Mallers promised, for example, that customers would be able to use Strike to pay for everyday purchases in bitcoin at Walmart, McDonald’s, Walgreens, and Starbucks. This simply never happened.
Then in 2021, Mallers demonstrated international workers sending a USD remittance in their Strike account. In fact, for months, Strike was secretly representing Tether as USD to customers in its app.
Good thing Tether’s peg held $1 until Strike disclosed the full truth. Nowadays, it’s stopped using Tether, anyway.
Too bad customers thought they had real USD all along. On their behalf, and without their consent, Strike previously used Tethers to back the USD balances that it represented as USD to customers.
The email breach at Strike was real
In a statement to crypto publication The Block, Strike initially denied ZachXBT’s allegations of a major data breach. The breach, ZachXBT alleged, exposed private email addresses customers had used to register with Strike.
Evidence soon surfaced.
Strike customers started receiving scam emails sent to a dedicated email address that they used only to sign up for Strike. Phishing emails used well-known brands in the crypto industry, such as Etherscan and OpenSea.
[email protected] to an email address that I only gave to [email protected] -> You're on the list!yo @Strike when did you leak your customer emails? I just received scam email from https://t.co/y5ATj4ck7j
A customer complains about Strike’s data breach.
Another phishing attack played off of the idea that some beginners might not know how digital assets work. It suggested that users could only confirm a transaction if they clicked through to a phishing site.— BitcoinEagle.dev (@bitcoin_eagle) October 30, 2023
More customers complain to Strike about phishing emails.
Read more: Bud to Bitcoin: How Strike’s Jack Mallers stumbled from cannabis to crypto
Anonymous investigator ZachXBT posted evidence of the breach on a Telegram channel. The evidence included the above claims, which suggested that the scam emails would only have happened if Strike had actually suffered a data breach.
The curious history of Strike
Jack Mallers was born into wealth and enjoyed family connections to the highest tiers of Chicago finance. His original startup, Zap, rotated through business models like Colorado cannabis payments and white-labeled Bittrex services.
When El Salvador announced bitcoin as legal tender, Mallers tried to earn a government contract for Strike. He lost to Chivo, a South American competitor.
Zap eventually pivoted to developing Tether, Bitcoin, and Bitcoin Lightning Network-based functionalities. It launched Strike API in 2021. Twitter integrated its API to provide a Bitcoin Lightning Network-based tipping option, which has failed to gain much traction. As Elon Musk purchased Twitter, Musk made his intentions clear to opt for Dogecoin.
Unfortunately, researcher ZachXBT has forced Mallers and Strike to backpedal yet again. Despite the company’s initial claim that “there’s no evidence that Strike was breached,” there was plenty of evidence. Indeed, Strike was breached.
Got a tip? Send us an email or ProtonMail. For more informed news, follow us on X, Instagram, Bluesky, and Google News, or subscribe to our YouTube channel.
Source: https://protos.com/jack-mallers-strike-denied-an-email-breach-that-definitely-happened/
Tagged @thedessertlinux #thedessertlinux
When are people going to stop using custodians that have all their personal identifying info?
I actually thought one of the main points about the cash final nature of Bitcoin or any crypto was that you didn't need KYC because the message was the payment, not a promise to pay later. It seems that if this point is so often repeated as an advantage of ccrypto over the tradfi system then not storing your customers info would be the way to go. But perhaps as a licensed money transfer company they have no choice...
Yes that's right, they don't. The problem is, recently, you need to be a licensed money transfer business to facilitate Bitcoin.
Oh so recent change?
I thought something like that would require clarification of Bitcoin as a currency, commodity or security? Does Dash have regulatory clarity as to whether it is a currency, commodity or security?
It's been a gradual chance since 2015 or so. It's a practical limitation, not a legal one: very few people can actually transact on the base layer.
This is not an issue that affects other cryptos, really. Except maybe Ethereum.
Interesting, I thought to require such a license Bitcoin would have clarification of it's status as currency, commodity or security?
Does Dash have such regulatory clarity in the US or abroad?