Thank you for this analysis.
I am summoning @acidyo to check this out, because he was one of the first (or the first) to write about this.
You are viewing a single comment's thread from:
Thank you for this analysis.
I am summoning @acidyo to check this out, because he was one of the first (or the first) to write about this.
yeah I just noticed the memo spam early since my username starts with an A and figured I'd warn people. Obviously it may not be a scammer but as someone said why not just have people enter their username for rewards at the end than have them sign a tx, no one would enter another person's username after filling in the survey to give them $1...
I just noticed several of the accounts receiving funds all sent it to one account. Just over 300 HIVE went out the door.
And probably just used a script for that.
It's enough to copy the final submit HTTP call and replace it with your username, your public active key and a signature that can easily be created programmatically by signing the "2 words" login message the website gives you.
Gotta make it safer if you're distributing free money on the internet.. 🙈🙈🙈
NOTE: pretty sure that it stopped giving rewards only because it was drained of all the liquid HIVE in the account.
Warning the survey from getting scammed wasn't really on my mind. :p
They got burned.