Deleting my initial groggy sign-on where I shame people for following screenshots. It sounds like my warpcast account posted some memecoin this morning. Still investigating how.

I'm really sorry if you were taken by that, I'll do my best to figure out what happened. https://warpcast.com/danfinlay/0x2f2a2e3b

artist friends diving into crypto, take note

there's been a lot of FOMO-driven trading lately, and people will jump at anything that hints at a token pump 

Dan had his Warpcast account post a random memecoin promo while he was asleep 

it's going to be interesting to see what the investigation reveals

stay vigilant

Ok, well I've rotated my FC signer here. I *should* be rid of co-residents in this account for the moment.

Thanks to the FC team for helping me speed through the recovery process despite some complications.

This is an extremely concerning security incident to me, and I'll be doing my best to identify how it happened.

https://warpcast.com/danfinlay/0x9faf374e

Earlier this morning @danfinlay's account posted a message about a token. This message wasn't posted by Dan and we've been looking into what may have happened. 

We're still investigating and don't have a root cause yet, but believe this issue only affects this particular account. More details in thread.

Technowatermelon. Elder Millenial. Building Farcaster. 

nf.td/varun

The message about the token was posted at ~ 7:15am PT using Warpcast. 

A little before that, someone logged into Dan's account from a Windows machine. They used the email authentication flow to request a magic link, and appeared to be able to authorize it from Dan's email.

It's not clear how they were able to get authorization from Dan's email, and we're investigating this. We will post an update here soon. 

We're also going to add 2FA, so that users are more strongly protected if their emails get compromised.

Digital Media Producer. I like particles and waves too. I like art.