Deleting my initial groggy sign-on where I shame people for following screenshots. It sounds like my warpcast account posted some memecoin this morning. Still investigating how.

I'm really sorry if you were taken by that, I'll do my best to figure out what happened. https://warpcast.com/danfinlay/0x2f2a2e3b

artist friends diving into crypto, take note

there's been a lot of FOMO-driven trading lately, and people will jump at anything that hints at a token pump 

Dan had his Warpcast account post a random memecoin promo while he was asleep 

it's going to be interesting to see what the investigation reveals

stay vigilant

Ok, well I've rotated my FC signer here. I *should* be rid of co-residents in this account for the moment.

Thanks to the FC team for helping me speed through the recovery process despite some complications.

This is an extremely concerning security incident to me, and I'll be doing my best to identify how it happened.

Earlier this morning @danfinlay's account posted a message about a token. This message wasn't posted by Dan and we've been looking into what may have happened. 

We're still investigating and don't have a root cause yet, but believe this issue only affects this particular account. More details in thread.

The message about the token was posted at ~ 7:15am PT using Warpcast. 

A little before that, someone logged into Dan's account from a Windows machine. They used the email authentication flow to request a magic link, and appeared to be able to authorize it from Dan's email.

It's not clear how they were able to get authorization from Dan's email, and we're investigating this. We will post an update here soon. 

We're also going to add 2FA, so that users are more strongly protected if their emails get compromised.

After further investigation with @danfinlay and team, it appears that the compromise was due to a registrar that has locked up the email domain. 

It appears to have only affected this one account. 

Some more details in thread about what we're doing next.

Latest update

No evidence to believe there is a wider security issue.

Will ship a few additional improvements for boosting the security of individual accounts this week.

https://warpcast.com/v/0x7a179cea

https://warpcast.com/v/0x7a179cea
https://warpcast.com/dwr.eth/0xcd91e65a

https://warpcast.com/danfinlay/0x9faf374e