A Popular XAPO Faucet Script Is Stealing Your Money!

[coinableS]

If you google  "XAPO Faucet Script" you will likely end up at one of these pages since they are the top google results:

1) https://bitcointalk.org/index.php?topic=975488.0
2) https://bitcointalk.org/index.php?topic=1035041.0
3) http://makebucks.today/how-to-free-xapo-bitcoin-faucet/

All of these have links to Faucet-Builder on Github by chipshot. Well this code will payout to your site visitors but it will also add "destbogan@gmail" as a payee for every payout and will send them 1% of the payout amount.

https://github.com/chipshotDEV/Faucet-Builder/blob/master/functions.php#L173

Code:

    //first it sends to the normal faucet user
    $unique_request_id = uniqid();
    $ret = $creditAPI->credit($to, $currency, $unique_request_id, $amount, $comments);

    //then it takes 1% of the amount and sends it to destbogan@gmailcom
    $amount = $amount * 0.01;
    $unique_request_id = uniqid();
    $to="destbogan@gmail.com";
    $ret = $creditAPI->credit($to, $currency, $unique_request_id, $amount, "Thank you for using Faucet Builder");

[mari88]

thanks for the INfo

iam using the script here:
https://github.com/chipshotDEV/FaucetBuilder

is there also a 1% amount to the scripter ?



kind regards

[coinableS]

thanks for the INfo

iam using the script here:
https://github.com/chipshotDEV/FaucetBuilder

is there also a 1% amount to the scripter ?



kind regards

It doesn't look like that version is taking 1%

Code:

function pay($to, $amount, $comment)
{
    $settings = $GLOBALS["settings"];
    $serviceUrl = "https://api.xapo.com/v1";
    $creditAPI = new XapoCreditAPI($serviceUrl, $settings['xapo_app_id'], $settings['xapo_secret_key']);
    $currency = "SAT"; // SAT | BTC
    $unique_request_id = uniqid();
    return $creditAPI->credit($to, $currency, $unique_request_id, $amount, $comments);
}

I'd still be careful, if he was being dishonest about taking 1%, what else might he be dishonest about?

[giustone]

Thanks for the info.
Other faucets ask for install some browser extension.
Use adblock to protect you from steal your bitcoins via spyware extension.

[tarsua]

Was he dis-honest? did he say that it wasnt there? also, was the script public? if it was public i could see why he would want a cut of the profits after taking probably hours to make the script

[coinableS]

Was he dis-honest? did he say that it wasnt there? also, was the script public? if it was public i could see why he would want a cut of the profits after taking probably hours to make the script

YES he was dishonest because the site says no fees...free.



I would count that as stealing from the faucet owners without them knowing.

The script on Faucetbuilder.com is actually from another developer on github. https://github.com/destinybogan/Faucet-Builder

From what I see the code on the project looks clean. It's a little confusing since FaucetBuilder is being used for multiple projects. 

[FaucetBuilder]

Hello I am the creator of FaucetBuilder and script. The email destbogan@gmail.com belongs to me.

Originally I built the script with a 1% fee to cover my time for building this. I published it and had a few friends testing it. This was before faucetbuilder.com existed and was live.

The main feedback from the guys testing it was that 1% flat-fee is not the right way since the APIs were not built by me (they are originally Xapo). So, I took the 1% fee out and launched faucetbuilder.com for free and took btc donations.

I want to clarify that yes my original plan was to charge a fee. But I removed this fee before my script and website (faucetbuilder.com) was officially launched. I am not sure how the script with 1% fee is being circulated since I dont promote on any of my links on bitcointalk or website.

My wallet destbogan@gmail.com has 800 bits (~$0.18) and not much. If you are using the original script with the fee email me and I will return your funds. I am trying to do honest business.

[coinableS]

Hello I am the creator of FaucetBuilder and script. The email destbogan@gmail.com belongs to me.

Originally I built the script with a 1% fee to cover my time for building this. I published it and had a few friends testing it. This was before faucetbuilder.com existed and was live.

The main feedback from the guys testing it was that 1% flat-fee is not the right way since the APIs were not built by me (they are originally Xapo). So, I took the 1% fee out and launched faucetbuilder.com for free and took btc donations.

I want to clarify that yes my original plan was to charge a fee. But I removed this fee before my script and website (faucetbuilder.com) was officially launched. I am not sure how the script with 1% fee is being circulated since I dont promote on any of my links on bitcointalk or website.

My wallet destbogan@gmail.com has 800 bits (~$0.18) and not much. If you are using the original script with the fee email me and I will return your funds. I am trying to do honest business.

Thanks for the honest reply. I think you are trying to do the right thing as I see your site has code that does not include the 1% scalping fee on each transaction. People are using the older versions though, someone was asking for help in another sub forum and they posted the code which lead to me creating this thread, which I will lock now as it looks like you are doing the right thing and I do not wish to harm your project.