@reachbot /getreach building an AI x SocialFi mini-app | Open-source human-readable EVM data https://github.com/3loop/loop-decoder

I'm the whitehat who "hacked" $JACKPOT. The founder was incredibly rude when I tried to disclose that the private key of the admin account was published in the frontend where anyone could find it with "inspect source".

When I iterated that the vulnerability was critical and could drain the entire contract he told me to "go ahead and do it". 

So I did.

That got his attention and he was very apologetic. I sent everything back as soon as he was able to confirm control of the deployer account. I took screenshots of all interactions except the first rude messages because he deleted them before I could.

For the record I don't think it was a scam. I think he was just trying to build something that got hype but using a completely inexperienced dev to do it. And then so inundated with spam that he couldn't distinguish a real security disclosure. Whether the plan was to rug afterwards is anyone's guess but I don't know if assumption of guilt is correct here.

ahah some interesting details about the $jackpot "hack" I've mentioned

also seen this Alireza dude in Native tg chat and in Henlo tg chat. He was rather active in the former, pushing shill narratives and such. 

I'm starting to think they're all in the same boat, derek, ciniz, karbon, all those 'builders' once backed by jesse pollak. 

by "backed" they usually mean Jesse commented one of their tweets

I would not think it so categorically that they are all connected. 

It might be just a social engineering. Seems like he's just pretending to be friendly and gained the trust of at least a few people. 

Luckily he was kicked from the mod

The “Numbers Go Up” game or intentional fraud?

A story about fake devs, forgotten projects launched with @clankeronbase, @_proxystudio and how someone may be making thousands of dollars monthly on @farcaster_xyz using fake accounts. https://t.co/cpT74HoGsQ

For proactive transparency, @TheAlirezaz has been in the Native community since day one. 

He has no access to code, funds, or tokens. Purely a content moderator. 

Out of an abundance of caution, his admin privileges have been removed from TG and X moderation.

Derek Brown

experimenting with a DIY graphic editor
https://rodeo.club/@axek

I would not think it so categorically that they are all connected. 

It might be just a social engineering. Seems like he's just pretending to be friendly and gained the trust of at least a few people. 

Luckily he was kicked from the mod https://x.com/derekbrown/status/1919891775910510616

That's a great and rightful correction. for instance i love derek's work and the chat was somewhat cooler than an avg "new clanker just dropped" kind of chat/  i also love what base is doing and clanker team. What i mean is the innovative tech. i think the tech is amazing, and honestly i don't research that deep, i just follow the buzz on fc and absolutely absent on X, also left all tg crypto chats in january and never looked back. 

ps: really enjoyed your read, hope it never turns out you're zachxbt's atl, ahhaha, sorry for my humor, you're legendary investigator yourself