Be careful of bounty/airdrop campaigns with "download app" requirement

[limtjoehua]

I personally always keep a private key or seed phrase, google auty and a personal email into a different smartphone or device specifically, so I use other smartphones and PCs to work in a bounty. To this day this method is very effective in keeping my assets safer and I am not worried if there are bounty requirements to install their app.

[1715491317]

1715491317

[1715491317]

1715491317

[1715491317]

1715491317

[1715491317]

1715491317

[1715491317]

1715491317

[Erickan]

I almost say no to bounty campaigns that require KYC and force to download the app. I will not because of a few bonuses that jeopardize my personal information, it is not worth it. So at this stage I almost rarely participate in bounty campaigns, I hardly find any outstanding ICO and show the possibility of success, perhaps the bounty campaign will gradually disappear with ICO movement.

[adzino]

i know that people will try to put virus on their apps, they try to make the most of it, even if its not the companies, bad employee also can put virus,trojan, or backdoor on their app without the companies knowing it. but if its on google play store that mean its safe right? i don't really know how that work.

As far as I know, the apps are scanned and made sure they are safe by google before getting it uploaded to their server. But still, they may be able to bypass their security and still infect the application with any kind of virus.
Companies will know if an employee tampers their application. After an application is developed, they go through various testing through different departments (like QA and stuffs - not an expert in this field) and one of them is bound to find out the trap.

[izanagi narukami]

This is another reason why we should more careful about join bounty.
Installing new application is forbidden except that you already trust their background or based on community feedback.

When crypto getting well known, more hacker try to do their work so becareful guys !

[jazmuzika217]

Thank you for reminders. I believe to your insight . All we know that we are all we in crypto world, all of our action here is processed by internet and technology so it is not impossible that there will be something wrong when bounty required to download some apps. We need to be carefull because we are not only investing money. We also invest time and effort.

[aioc]

Check the wallet or the application on Virustotal and also check their GitHub or ask developers to check the GitHub some application and wallets are clean to download, but also check the reputation of the developers, and always check the scam sections for complaints.

[hahay]

Agree and so far I'm only looking for safe steps where projects are managed by reputable managers or may have been recommended by trusted people in the forum. That way they at least tried it and checked it first so that in wallet application or whatever it proved to be safe, I made this step because I had experienced a bad thing that in the end I didn't want to repeat the same mistake for the umpteenth time.

[Muhammad Muneeb]

I am not discouraging hunters to join bounty campaigns that requires you to download their app or wallet. This is just a friendly reminder to everyone that we should be careful since there have been some malicious apps used to collect personal information and steal funds from mobile/pc. There were also instances where hackers were able to exploit the vulnerabilities of some apps.

If you still wish to continue and download their app, at least take some measures like not storing your private keys/seed phrase in your phone/pc to protect your funds.

You can also read guides posted by some of the forum members here.

• Not all crypto apps in App stores are safe
• [Guide] Virustotal scan guideline to detect viruses, trojans, malwares, worms

Have a safe bounty hunting!

i have restricted the permissions of these bounty app to my files and data. ios is more secure and less vulnerable than andriod. going to uninstall these app right know thanks for your reminder

[Drai]

People tend to forget this fact whenever bounty is involved, they just forget the fact that everything that glitters is not good and they download any app that is recommended to them, we should endavour to be more careful and discerning to avoid future loss of funds, thanks for the gentle reminder.

[jostorres]

I have also heard of instances like this, and it is the right thing you are doing by alerting people so that they can be careful, hackers will go to any length to just make sure that they steal fund from people’s account. The only application I can accept to use their download their wallet are projects that I fully trust, and trust me, before I can rely on any project, lots of research must have gone into it, and no matter how reliable they are, as soon as I get the token, I move it out of the wallet immediately and transfer it to any other reliable wallet.

It is one of the reason why I have a policy of participating in bounties that are built on Ethereum blockchain, it will be easy for me to immediately move it out of the wallet into myetherwallet, while I delete the application off my pc before they get the chance to hack it, that is if they get compromised.

[wywoc]

Personally i don't see the reason why anyone will participate in a campaign that requires you to download app because if every campaign is asking us to download app, how much of space do we have on our android to do all that, you better be wise, do not let anyone steal your information.

Not all. Some projects still require downloading their app and filling in the registration id into the application form. I usually fill in the id, but at the end of the campaign I will download the app, because at that time I will have enough time to see the feedbacks about the app.

[Tylev]

Once my email address was hacked once and I lost my some tokens, the secret keys of which I kept, I no longer keep them on my device. Even when I create a wallet, I do not copy the secret key, but manually write it out and keep the records in paper form. True, you need to make sure that it is recorded correctly. To do this, manually enter it and check if this key matches the address of the wallet. Also do not use backup. Since then, I have no problems with hacking.

[iTradeChips]

I am always careful of these bounties with extra requirements to fulfill before releasing the bounty such as KYC and the download apps process. Unfortunately these companies and projects tend to announce these additional requirements always at the end of a campaign. So the losers are still going to be the bounty hunters since they were not informed about the said requirement that they need to fulfill. I would stay away from them as much as possible.

[Delilonia1]

I am not discouraging hunters to join bounty campaigns that requires you to download their app or wallet. This is just a friendly reminder to everyone that we should be careful since there have been some malicious apps used to collect personal information and steal funds from mobile/pc. There were also instances where hackers were able to exploit the vulnerabilities of some apps.

If you still wish to continue and download their app, at least take some measures like not storing your private keys/seed phrase in your phone/pc to protect your funds.

You can also read guides posted by some of the forum members here.

• Not all crypto apps in App stores are safe
• [Guide] Virustotal scan guideline to detect viruses, trojans, malwares, worms

Have a safe bounty hunting!

Thanks so much for the headsup. You have actually given the best advice here that any device you will use for a crypto transactions that requires you downloading their app should not contain your personal data.

Anything can be hacked these days. And one should have it at the back of his mind that the owners of these projects are not the ones hacking your account. Some malicious people are just enemies of progress, trying to frustrate another man's work by exploiting all the vulnerabilities of his ideas. Let's be guided.

[maxreish]

I appreciate the warning, buddy. At first, as I wasn't aware of those suspicious apps, I have downloaded the required wallet. Not too sure how that works but since the project itself did not succeeded, I've deleted it already. This is to remind bounty hunters and participants not to fall for this kind of apps. Our personal infos are being collectes when signing up to their app. Let's be vigilant and always think twice before you click.

[BitcoinPanther]

I totally agree with you. I am not saying that the campaigns who require this are just fake campaign who wanted to steal some tokens or BTC to all the participants. Better safe than sorry. We cannot easily detect malware especially when we are not that techy. So secure our private keys and passwords.

[coin-investor]

I am not discouraging hunters to join bounty campaigns that requires you to download their app or wallet. This is just a friendly reminder to everyone that we should be careful since there have been some malicious apps used to collect personal information and steal funds from mobile/pc. There were also instances where hackers were able to exploit the vulnerabilities of some apps.

If you still wish to continue and download their app, at least take some measures like not storing your private keys/seed phrase in your phone/pc to protect your funds.

You can also read guides posted by some of the forum members here.

• Not all crypto apps in App stores are safe
• [Guide] Virustotal scan guideline to detect viruses, trojans, malwares, worms

Have a safe bounty hunting!

If you don't know how to detect virus from the application or cannot do proper research if the application is clean and virus free, it's better not to participate at all, it's not worth it, the token that you are participating do no have value at all so why risk your safety in exchange that has no value in the market, it's ok if they are paying in Bitcoin or any tradeable coins in the market.

[zhea]

Do you know someone who experienced such fate? It's a good reminder though and i hope that we could somehow know that the APP that we are going to install is safe. If we are bounty hunters, we are vulnerable to this kind of scamming as we always follow what the bounty team tell us to do. Maybe some can avoid this but also thousands will fall victim to this modus.

[AlaEhBTC]

We do not know also maybe their application has some kind of spyware or things which is used to spy on a computer to gather information about someone.

[sherenikaw]

Thanks for this information. So far, I never find yet this kind of bounty campaign. But, you are true enough. It seems to be strange if we should download a certain application when joining the bounty program. Commonly, we only need to make or download their wallet because they don't use the type of ERC20 and others. But in this case, we need to observe more about what kind of app to be downloaded and never believe it easily without any analyzing.