Oddbean new post about | logout
 I fully understand #Mutiny’s decision. 

There is clearly problem with how #Zeus’s #zaplocker zeuspay.com server works. Evan definitely employs the scam scenario described in ‘Fixing the man in the middle’ of GitHub - supertestnet/zaplocker: Non-custodial lightning address server with base layer support too
https://github.com/supertestnet/zaplocker

They use social engineering on their Telegram chat, force-closures of channels to their embedded nodes, eternal ‘payments in transit’ (more than three weeks) and ‘advising’ users to roll over nostr keys linked to a zaplocker address. Finally asking for hashes of these payments and eventually skimming their mobile node’s betas app wallets to the very bottom. https://image.nostr.build/8dedc3cbd1265f0392ce13ad0fcd8d2eea5b71c85289f81f878b1e57f5819354.jpg https://image.nostr.build/2ec4bb41429da9014b6e1b7ffa8b1d989225af7f1637bd1cf5e1858515a3c0d1.jpg https://image.nostr.build/c137b167288c06f7108bb1c74d85983436306b3070f61b18f642cfd1816db623.jpg https://image.nostr.build/53a5c9cb0d5e751e145ba00c45c6ff8d992d460127a1d877bbd8ce60f32615e3.jpg https://image.nostr.build/710ac6f843ee71c5b7a5d6edb7954b1d58a331073a8a1a8486c9a24e589ae2fa.jpg https://image.nostr.build/05abebef5cc8f18e0fbab3aa7ca1b85c6ef9a3eaa6e82e6adb2c0bb06ebbc554.jpg