How tipping and marketing miniapps could be exploited by attackers for financial gain.

How tipping and marketing miniapps could be exploited by attackers for financial gain.

https://blog.vrypan.net/2025/05/28/social-attacks-with-monetary-value/

Dad, geek, conversation liquidity provider. vrypan.net (home), @l--o--l (fun). devcoin:$lemon3

if you see x8 visits from me, please know that it's not because the miniapp is wildly successul but that's because that's how many attempts it took me to try and open the post outside of the stupid miniapp container which kept asking me to add to my warplet every time

A doodler and computerer. I like permissive/permissionless open source, smart contracts, p2p systems, room-scale VR, and NixOS.

shazow.net

Currently: WhatsABI

Wait. Did it ask you to add your wallet? That's not supposed to happen. It would ask you to add the miniapp, but not the wallet...

I mean that as the same thing, "Add to Farcaster"

"Add to Farcaster" feels wrong for random blog post miniapps in a social context, but... it kinda makes sense in an RSS feed reader context?

Idea: Farcaster-native Blog Reader. Support RSS but also miniapps, "adding" a blog miniapp is equivalent to subscribing.

Imagine blogs but with cryptonative miniapp features.

https://farcaster.xyz/shazow.eth/0x05e95800