HexBrain

MyCrypto · Report #679657

The twitter accounts are linked on page but unclaimed.

Validstatus
lowseverity
11upvotes
17 Sept 2019disclosed

How it was found

Hey team! There is two unclaimed social media account on "https://about.mycrypto.com"

Accounts

https://twitter.com/rika_sukenik https://twitter.com/sharonmanriquej

Proof Of Concept (POC)

For account one: {F562323}

For account two: {F562307} {F562308} {F562310}

Note

Yes you noticed that like "Social engineering manipulation of MyCrypto staff members or contractors." in your policy. But anyway i wanted to report that. If my report is not valid, please let me close report :)

Impact

That can be using for phishing attacks or like that. That should be fixed for my opinion.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original