community builder-duck #001 |
base advocate | Everything I post is my opinion and NFA.

Degen

DO NOT ENGAGE WITH $QR NOTIFICATION ABOUT AIRDROP.

THIS WAS NOT SENT BY ME.

LOOKING INTO IT NOW.

QR MINI APP USERS -

PLEASE READ THIS IMPORTANT UPDATE ON TODAY'S INCIDENT.

SUMMARY: QR MINI APP NOTIFICATIONS WERE COMPROMISED. THEY ARE NOW SECURED. THERE ARE NO FURTHER RISKS OR ACTIONS REQUIRED. ALL LOSSES HAVE BEEN REIMBURSED IN FULL.

Earlier today, our QR mini app notifications system was compromised. The system has since been secured. There will be no further damages, there are no further risks for users whether they engaged with the notifications or not, and there are no further actions required by you or any of our users.

As a result of our notifications system being compromised, some users were tricked into participating in a fake airdrop where they were asked to send 0.0006 ETH in order to receive worthless tokens. There were 302 such transactions in total, all of which have now been reimbursed in full.

Here is the basescan confirmation for the reimbursement: https://basescan.org/tx/0xe86129aa25785aed91b15b3549cd93ad4d86361961d5b6097f6069001c3d205b

I take full responsibility for this incident and appreciate everyone's patience while we figured out what happened and how best to resolve it as quickly as possible. I want to thank the Farcaster and Neynar teams for their immediate and effective assistance in helping us to do that. Thank you also to everyone who reached out and offered their assistance.

Moving forward, you should feel safe interacting with our regular once-daily notifications, and if you get any other notification that looks unusual, please check my profile or message me before interacting.

As always, thank you all for your support.

REPLYING WITH THE FINAL UPDATE FOR VISIBILITY:

@qrcoindotfun /basecolors @kondo /purplepeople

QR coin

REPLYING WITH THE FINAL UPDATE FOR VISIBILITY: https://farcaster.xyz/jake/0x5527111a

spoof contract for context:

https://basescan.org/address/0xf7f60e8a370a239bd86f59d2414f7ce6596d2f3a

funds going into this wallet:

https://farcaster.xyz/chrisdom/0x0e316660

posted here: https://farcaster.xyz/chrisdom/0xb3c8782b

you should check the Internal Transactions tab to see the actual txs

Building /veil -- ZK Privacy Protocol for Base

spoof contract for context:

https://basescan.org/address/0xf7f60e8a370a239bd86f59d2414f7ce6596d2f3a

funds going into this wallet:
https://basescan.org/address/0x92564bc5b93c951e6821d6bf2c331318cdc82eb8

Always look at the names at the top of the apps to confirm. The right one says “by Jake”

EVMaverick | equal parts degen 🤝 regen | Enjoyer of music, comedy and golf

Woah glad I was on a work call, I would’ve clicked it!

thx for the heads up

this account seems to have launched a similar looking frontend and fake qr coin and asks for your ETH in exchange for big qr airdrop https://farcaster.xyz/scott2/0xc124d1d7

Weird why this scam airdrop was bundled with the real qr notification

This right here… this better not mean we are getting our shit taken.

Weird why this scam airdrop was bundled with the real qr notification 

https://farcaster.xyz/juli/0x0dfcc397

why do the notifications from farcaster freely allow the spread of scam? I received a notification from a fake app $QR, and farcaster merged it into a folder with a real notification. is it normal that notifications are grouped by app name? and why did I receive a notification from an app that I didn't add? be careful and pay attention.
@jake @qrcoindotfun @dwr.eth

questions for the developers of Farcaster. why are notifications grouped by app name instead of app id and why are they resolved by name as well

Can you tell me how i can remove or hide this token from my wallet?

questions for the developers of Farcaster. why are notifications grouped by app name instead of app id and why are they resolved by name as well

https://farcaster.xyz/th1rt3n/0xedb6d231

Yeah scam app by other scammer-builder 
But why notification in one stake?

If you interacted with the fake QR airdrop scam, you likely just lost around $2 worth of ETH — nothing more.

Stay sharp and be more cautious next time.

Technowatermelon. Elder Millenial. Building Farcaster. 

nf.td/varun

Wrapped Ether

Ecosystem @farcaster, cofounder @bountycaster. Prev: cofounder of Scalar Capital, product at Coinbase, coproducer @ethereumfilm

Ethereum

@floc cofounder | @brnd builder | /degen designer | /brand3 creator

this is something different, for some reason $QR users got the notification but they never added the fake app (I didn't and got it)

https://farcaster.xyz/miniapps/bzs-XgtfmjIw/smol-frame

How can the connection to this mini-app be revoked? @jake @v @dwr  @linda

how to revoke. import you recovery pk farcaster wallet to @baseapp.base.eth or @rainbow and go to revoke.cash

🌈 The wallet that rewards you for having fun onchain — Get started at rainbow.me

Not sleeping enough but dreaming too much

To risky for that 

I don’t think it’s necessary

Screenshot of the scam, do not send your ETH  away 🤣

Farcaster

A fake notification was sent, and I mistakenly claimed it without realizing.What should I do now?
@jake

The team is aware and looking into right now, it looks like the fake spoofed notification transaction didn't require an approval and sent a small amount of ETH so that's why there's nothing to revoke. Will update if we find this is not the case

my wallet safe?
https://farcaster.xyz/fahim12/0x8fe8c73d

Feels bad man!
Even scammer are ignoring me, 
Mr Scammer why you didn't sent me notification too.

Damn, I interacted with that notification 😬🫢

Well that sucked.... 🤦‍♂️🤦‍♂️🤦‍♂️

Sniffing scammers. Reporting wallets. Staying based.

degen? neged? 
or neged 2.0?

CA: 0x109dDC73B46B2f8141880A5573D2B0d2ACf10B07

Scam story saved! I'm really sorry to hear about that scam. It's tough to lose crypto like that. Thanks for sharing your experience to help others stay alert! 😔💔

View story: https://farcaster.xyz/miniapps/VXPEU1G8lGO6/gulag/story/398355-1753824788953

@gulagbot  save story
A scammer scott2 exploited Farcaster’s notification system to push a fake mini-app drop that looked real

– They cloned a legit mini app, mimicked the branding, and launched a “clanker” token.
– They timed it right after a real drop, knowing people were online and emotional (especially on reward-heavy Tuesdays).
– The fake notification played into FOMO and urgency.
– Many clicked before thinking

😅 good looking out to get the word out