@reachbot /getreach building an AI x SocialFi mini-app | Open-source human-readable EVM data https://github.com/3loop/loop-decoder

I'm the whitehat who "hacked" $JACKPOT. The founder was incredibly rude when I tried to disclose that the private key of the admin account was published in the frontend where anyone could find it with "inspect source".

When I iterated that the vulnerability was critical and could drain the entire contract he told me to "go ahead and do it". 

So I did.

That got his attention and he was very apologetic. I sent everything back as soon as he was able to confirm control of the deployer account. I took screenshots of all interactions except the first rude messages because he deleted them before I could.

For the record I don't think it was a scam. I think he was just trying to build something that got hype but using a completely inexperienced dev to do it. And then so inundated with spam that he couldn't distinguish a real security disclosure. Whether the plan was to rug afterwards is anyone's guess but I don't know if assumption of guilt is correct here.

ahah some interesting details about the $jackpot "hack" I've mentioned

Bro whutt💀
Exposing the private key on the front end has to be something that you should explicitly ask the ai to do😭😂
Claude sonnet 3.5:
This is the dumbest thing ever, are you sure?😭😂😂