@reachbot /getreach building an AI x SocialFi mini-app | Open-source human-readable EVM data https://github.com/3loop/loop-decoder

I'm the whitehat who "hacked" $JACKPOT. The founder was incredibly rude when I tried to disclose that the private key of the admin account was published in the frontend where anyone could find it with "inspect source".

When I iterated that the vulnerability was critical and could drain the entire contract he told me to "go ahead and do it". 

So I did.

That got his attention and he was very apologetic. I sent everything back as soon as he was able to confirm control of the deployer account. I took screenshots of all interactions except the first rude messages because he deleted them before I could.

For the record I don't think it was a scam. I think he was just trying to build something that got hype but using a completely inexperienced dev to do it. And then so inundated with spam that he couldn't distinguish a real security disclosure. Whether the plan was to rug afterwards is anyone's guess but I don't know if assumption of guilt is correct here.

ahah some interesting details about the $jackpot "hack" I've mentioned

I would not think it so categorically that they are all connected. 

It might be just a social engineering. Seems like he's just pretending to be friendly and gained the trust of at least a few people. 

Luckily he was kicked from the mod

experimenting with a DIY graphic editor
https://rodeo.club/@axek

I would not think it so categorically that they are all connected. 

It might be just a social engineering. Seems like he's just pretending to be friendly and gained the trust of at least a few people. 

Luckily he was kicked from the mod https://x.com/derekbrown/status/1919891775910510616

also seen this Alireza dude in Native tg chat and in Henlo tg chat. He was rather active in the former, pushing shill narratives and such. 

I'm starting to think they're all in the same boat, derek, ciniz, karbon, all those 'builders' once backed by jesse pollak. 

by "backed" they usually mean Jesse commented one of their tweets

Bro whutt💀
Exposing the private key on the front end has to be something that you should explicitly ask the ai to do😭😂
Claude sonnet 3.5:
This is the dumbest thing ever, are you sure?😭😂😂