-
@ Satoshee
2025-01-27 04:14:18
A QUICK UPDATE ON WHY SATOSH.EE HAS BEEN IN MAINTENANCE MODE FOR THE PAST 2 WEEKS OR SO:
https://m.primal.net/OCGK.mp4
The video was recorded a few days ago, sorry for the delay in posting it. I wasn't planning to disclose the issue until it has been resolved, but I accidentally pressed the "record video" button instead of just taking a photo while on a hike, and since it was recording I felt I might as well do an update.
The loss itself was not huge, there was 100k sats in the Bitcoin Rewards pool of the Loyalty Program, out of which 81k were withdrawn. The attacker also had to make a legitimate purchase of a 10 USD Satoshee Gift Card first (paid 10.7k sats for it) so the total loss was 70,300 sats + downtime + the stress.
BTW, if you are a grey/black hat hacker and come across any type of vulnerability on the SATOSH.EE website, please contact me at kontext@satosh.ee with the details and you will be reimbursed for disclosing the issue in an ethical manner.