Earlier this morning @danfinlay's account posted a message about a token. This message wasn't posted by Dan and we've been looking into what may have happened. 

We're still investigating and don't have a root cause yet, but believe this issue only affects this particular account. More details in thread.

After further investigation with @danfinlay and team, it appears that the compromise was due to a registrar that has locked up the email domain. 

It appears to have only affected this one account. 

Some more details in thread about what we're doing next.

co founder of @metamask . Making computers behave for us.

Technowatermelon. Elder Millenial. Building Farcaster. 

nf.td/varun

We're going to ship some features this week that make it easier for users to protect themselves against compromise. Stay tuned for details.

If you sign up using Warpcast, we allow you to login on web if you can prove access to your email address. This is for convenience so you don't have to scan the QR code with the phone every time. 

This makes it possible to get access to post on behalf of your account if you've compromised someones email and they use Warcast. 

It does not give you full control over the farcaster account itself, but you can at least post from it temporarily.

What does “a registrar that has locked up the email domain” mean?

Hi, just wondering - when was this feature added? because i don't remember this feature.

MetaMask employee cannot secure an email : blames another platform his negligence 

So that’s the headline ? Got it 
Fox ded