Users recently woke up after eXch Anti-Phishing Campaign Launch

[xLays]

This is just for the record. I don't want to accuse any of this users but we all know the possible reason is they have an alt that might be try to claim more one with this eXch Anti-Phishing Campaign.

After this user Medusah gives merit of one of my post in eXch Anti-Phishing Campaign  I immediately checked his account because he's not familiar to me.. After checking his account/trust rating, I saw this notice: This user recently woke up from a long period of inactivity. And I'm sure that it is because of eXch Anti-Phishing Campaign Launch.


Then I check users who was not familiar for me, post with same activity and post count and found this user who also recently woke up from a long period of inactivity.

FleurTunisienne
blckhawk
mirtotanota No notice of This user recently woke up from a long period of inactivity. but there's more than 1 year gap from the last post prior to the application for the eXch Anti-Phishing Campaign.

[nutildah]

Medusah is extremely knowledgeable about Bitcoin and all-things privacy. I don't think they are an alt of the other accounts, which appear to be more generic. But the other accounts may be alts of accounts that also joined this "campaign." Any time someone is giving away BTC for something trivially easy to participate in, their thread will be flooded with alt farms. This is just the nature of the forum, and somewhat sadly, human beings.

Actually the accounts that are posting their BTC address after the main impersonating culprit has already been taken down (without suggesting they are contributing in any way) are more suspicious.

[_act_]

It is good that you bring this but I do not think they have any bad motives from waking up from their sleep. If anyone notice anything suspicious about the accounts, they can be tagged.

But I guess some people may still go ahead to give them neutral trust based on the fact that they have just woken up since a long period of time.

If you read the exch campaign rules, you will noticed that no one can cheat. I am talking about this:

We only consider to add new domains when they're older than 6 months.

Or do you think people will not have known such domain exist before 6 months?

When I read the campaign rules, I noticed anyone may not get any reward.

[BenCodie]

Medusah is extremely knowledgeable about Bitcoin and all-things privacy. I don't think they are an alt of the other accounts, which appear to be more generic. But the other accounts may be alts of accounts that also joined this "campaign." Any time someone is giving away BTC for something trivially easy to participate in, their thread will be flooded with alt farms. This is just the nature of the forum, and somewhat sadly, human beings.

Actually the accounts that are posting their BTC address after the main impersonating culprit has already been taken down (without suggesting they are contributing in any way) are more suspicious.

Just because they know about Bitcoin and all-things privacy, does not mean they aren't an alt. In fact, it makes it more likely that someone who joined in 2023 and has such knowledge is an alt, because having this level of knowledge with such a short period of time on the forum is rare.

They are also aware of how the activity system works since they joined:
https://bitcointalk.org/index.php?action=profile;u=3549558;sa=showPosts;start=400

If you view their posts from when they joined, just one or two posts in each activity period. Very informed posts too. Very strange for a new member to know so much about Bitcoin by default.

Trying to throw off a scent here nutildah or is this just another one of your "how could I have possibly known" moments?

I agree that Medusah is very likely to be an alt, and agree that this user waking up just for a share in the campaign is highly likely. Nice catch xLays.

It is good that you bring this but I do not think they have any bad motives from waking up from their sleep. If anyone notice anything suspicious about the accounts, they can be tagged.

But I guess some people may still go ahead to give them neutral trust based on the fact that they have just woken up since a long period of time.

I disagree and believe that there are bad motives waking up from their sleep to participate in a highly and unusually lucrative campaign.

It is good that you bring this but I do not think they have any bad motives from waking up from their sleep. If anyone notice anything suspicious about the accounts, they can be tagged.

But I guess some people may still go ahead to give them neutral trust based on the fact that they have just woken up since a long period of time.

If you read the exch campaign rules, you will noticed that no one can cheat. I am talking about this:

We only consider to add new domains when they're older than 6 months.

Or do you think people will not have known such domain exist before 6 months?

When I read the campaign rules, I noticed anyone may not get any reward.

This has nothing to do with anything. It simply states that any phishing domains that are older than 6 months will be added to the campaign. Not relevant to this topic at all.


I'm motivated to find all alts in that thread. Seems like a perfect honeypot thread to catch accounts that are being farmed.

[albon]

The @Medusah account's last post was on July 5, 2024, and the @blckhawk account's last post was on July 8, 2024.

Both accounts are engaged in Bitcoin discussions, Games and rounds.



Also, both accounts became active on March 15, 2025, and participated in the Anti-Phishing Campaign.



I strongly believe they are alt accounts, as evident from what I mentioned and the writing style of both accounts. What do you think?

[nutildah]

I strongly believe they are alt accounts, as evident from what I mentioned and the writing style of both accounts. What do you think?

You should have provided more concrete evidence first and then made the thread. Anybody can say any two accounts are alts, but its meaningless without direct evidence, which most commonly includes linking crypto addresses or sharing the social media accounts. Not a good idea to open threads based on what could be coincidences.

Here's why I think they are not alts: Medusah seems to be a native English speaker whereas blckhawk does not and has posted in Filipino language since their account's inception all the way through Dec 2023. That doesn't rule out the possibility that both accounts have alts, but they are not alts of each other.

Trying to throw off a scent here nutildah or is this just another one of your "how could I have possibly known" moments?

You are a complete asshole.

I'm motivated to find all alts in that thread. Seems like a perfect honeypot thread to catch accounts that are being farmed.

Then stop talking about it and do it. Words are cheap. Action is priceless.

[albon]

You should have provided more concrete evidence first and then made the thread. Anybody can say any two accounts are alts, but its meaningless without direct evidence, which most commonly includes linking crypto addresses or sharing the social media accounts. Not a good idea to open threads based on what could be coincidences.

Here's why I think they are not alts: Medusah seems to be a native English speaker whereas blckhawk does not and has posted in Filipino language since their account's inception all the way through Dec 2023. That doesn't rule out the possibility that both accounts have alts, but they are not alts of each other.

What I have concluded might be just a coincidence since there is no strong evidence here. I agree with you, nutildah, and I appreciate your input. 

Well, your conclusions seem convincing, although I'm surprised that all these accounts were active solely to participate in the campaign. In any case, if I come across anything new, I'd be happy to share it with you all.

We hope the eXch team will adjust the campaign rules to limit participation in the campaign to active forum accounts that have received at least 10 merit within 120 days. That would be a good measure to prevent any fraud.

[nutildah]

I'm surprised that all these accounts were active solely to participate in the campaign.

Each of them could have alt accounts, perhaps even participating in the same campaign. But they'd hardly be the first accounts to wake up for sake of participating in a new campaign.

We hope the eXch team will adjust the campaign rules to limit participation in the campaign to active forum accounts that have received at least 10 merit within 120 days. That would be a good measure to prevent any fraud.

Agreed. Given their lack of rules concerning alt accounts, they probably just aren't very familiar with the lengths that people will go to here in order to earn a little bit of extra BTC.

[BenCodie]

I strongly believe they are alt accounts, as evident from what I mentioned and the writing style of both accounts. What do you think?

You should have provided more concrete evidence first and then made the thread. Anybody can say any two accounts are alts, but its meaningless without direct evidence, which most commonly includes linking crypto addresses or sharing the social media accounts. Not a good idea to open threads based on what could be coincidences.

Here's why I think they are not alts: Medusah seems to be a native English speaker whereas blckhawk does not and has posted in Filipino language since their account's inception all the way through Dec 2023. That doesn't rule out the possibility that both accounts have alts, but they are not alts of each other.

I don't think sophisticated bad actors will be caught by linking crypto addresses or sharing social media accounts. I think that a sophisticated club who specializes in profiting from this forum is more than likely to be able to go undetected by most eyes, in fact, one might even say that they might publicly brag or even subtly disclose their syndicate, thinking of themselves as invincible...though that's just what one might say.

I strongly believe they are alt accounts, as evident from what I mentioned and the writing style of both accounts. What do you think?

Here's why I think they are not alts: Medusah seems to be a native English speaker whereas blckhawk does not and has posted in Filipino language since their account's inception all the way through Dec 2023. That doesn't rule out the possibility that both accounts have alts, but they are not alts of each other.

What makes you think that the Medusah account does not purposefully avoid that board or that both of these users are controlled by a group of people rather than an individual, one of which can speak filipino? Is the possibility that one or more individuals who are experienced in avoiding detection by farming accounts not being considered a possibility alongside the greatest fact of them all in this scenario?

The @Medusah account's last post was on July 5, 2024, and the @blckhawk account's last post was on July 8, 2024.

Both accounts are engaged in Bitcoin discussions, Games and rounds.



Also, both accounts became active on March 15, 2025, and participated in the Anti-Phishing Campaign.



I strongly believe they are alt accounts, as evident from what I mentioned and the writing style of both accounts. What do you think?

These are very strong points, much stronger than anything nutildah has countered with so far. These accounts are clearly being used to profit from the forum and are more than likely to be connected to the same individuals or group of individuals who are profiting from the forum using multiple accounts.

Trying to throw off a scent here nutildah or is this just another one of your "how could I have possibly known" moments?

You are a complete asshole.

I'll always take that over being negligent to or pro corruption, especially if me being an asshole is coming from the someone who fits either of those descriptions.

I'm motivated to find all alts in that thread. Seems like a perfect honeypot thread to catch accounts that are being farmed.

Then stop talking about it and do it. Words are cheap. Action is priceless.

I am quite fine collecting quotes and posting when I feel the time is right, thank you very much. At the end of the day, these exchanges only strengthen the overall case.

Agreed. Given their lack of rules concerning alt accounts, they probably just aren't very familiar with the lengths that people will go to here in order to earn a little bit of extra BTC.

Since there is one month delay between the domain going down and the payout, I've already started a private investigation which I will make public and provide to exch to help filter out cheaters before they pay anyone out.

[lovesmayfamilis]

Since there is one month delay between the domain going down and the payout, I've already started a private investigation which I will make public and provide to exch to help filter out cheaters before they pay anyone out.

If you don't rely on matching wallets and such, how can you prove the existence of alternative accounts? Just the words "it seems to me" and "I think" do not work as evidence on the forum. So if you started your "private" investigation, please bring your findings to this thread, and not just as a volunteer detective of alts for the exchange.

(Wide smile)

Alternative accounts:
https://ninjastic.space/addresses?address=bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Username : pinggoki
Forum Rank : Senior Member
Posts count : 3564 including this post
Address : bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Looking forward to working in this campaign again, hopefully.

BitcoinTalk username: blckhawk
Profile Link: https://bitcointalk.org/index.php?action=profile;u=997120
Rank to apply: Sr. Member
Current post count (including this): 363
BTC address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

I will do my due diligence in preventing scammers from getting their payday and I hope that me reporting these website helps a lot in suspending these websites.

BTC Address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Am I allowed to participate in this one? I've only been active today and it will feel like I'm taking advantage of this if I didn't ask of this one, seems like it's a good effort to do to prevent phishing from claiming more gullible people as their victims, hopefully I would be allowed.

https://bpip.org/smerit.aspx?from=blckhawk&to=Peanutswar

https://ninjastic.space/addresses?address=bc1qxxm007893fxht2al37skdjwyxn3fjrqnyrx57g  in question

[BenCodie]

Since there is one month delay between the domain going down and the payout, I've already started a private investigation which I will make public and provide to exch to help filter out cheaters before they pay anyone out.

If you don't rely on matching wallets and such, how can you prove the existence of alternative accounts? Just the words "it seems to me" and "I think" do not work as evidence on the forum. So if you started your "private" investigation, please bring your findings to this thread, and not just as a volunteer detective of alts for the exchange.

(Wide smile)

Alternative accounts:
https://ninjastic.space/addresses?address=bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Username : pinggoki
Forum Rank : Senior Member
Posts count : 3564 including this post
Address : bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Looking forward to working in this campaign again, hopefully.

BitcoinTalk username: blckhawk
Profile Link: https://bitcointalk.org/index.php?action=profile;u=997120
Rank to apply: Sr. Member
Current post count (including this): 363
BTC address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

I will do my due diligence in preventing scammers from getting their payday and I hope that me reporting these website helps a lot in suspending these websites.

BTC Address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Am I allowed to participate in this one? I've only been active today and it will feel like I'm taking advantage of this if I didn't ask of this one, seems like it's a good effort to do to prevent phishing from claiming more gullible people as their victims, hopefully I would be allowed.

https://bpip.org/smerit.aspx?from=blckhawk&to=Peanutswar

https://ninjastic.space/addresses?address=bc1qxxm007893fxht2al37skdjwyxn3fjrqnyrx57g  in question

One does not need to prove the connection to whom which the alt belongs to in order to know if they are an alt or a part of an account farming practice. Enough proof can be gathered to support if an account is genuine or abusing the forum/its campaigns, and there can be links through other key pieces of information (which i'll later disclose/make an example through this investigation) thanks to ninjastic and bpip. In fact, I caught a respected/once respected member blatantly farming an account with blatant abuse of merit. No blockchain evidence needed. Just a keen eye That will be posted soon, and I am very confident the account they are farming will be tagged and ruined (just letting them waste their merit first). Sure, maybe the perpetrator is not caught in the act on-chain, but I'm sure enough evidence can be gathered to prevent the account from being profitable to use, which will be enough to piss some folk here off

Of course I will bring the findings to this thread, as I said I am privately investigating now but I will make it public before I provide it to exch.

Since there is one month delay between the domain going down and the payout, I've already started a private investigation which I will make public and provide to exch to help filter out cheaters before they pay anyone out.

[nutildah]

Trying to throw off a scent here nutildah or is this just another one of your "how could I have possibly known" moments?

You are a complete asshole.

I'll always take that over being negligent to or pro corruption, especially if me being an asshole is coming from the someone who fits either of those descriptions.

You're an asshole not just because you like to troll me with unsubstantiated accusations from thread to thread, but also because you simply don't know what you're talking about, and you talk in volumes. Nobody has ever accused me of being "negligent" or "pro corruption" except for you. Words are very cheap, especially when coming from someone who never backs up their accusations. All you do is give opinions, which any ass can do.

[BenCodie]

Trying to throw off a scent here nutildah or is this just another one of your "how could I have possibly known" moments?

You are a complete asshole.

I'll always take that over being negligent to or pro corruption, especially if me being an asshole is coming from the someone who fits either of those descriptions.

You're an asshole not just because you like to troll me with unsubstantiated accusations from thread to thread, but also because you simply don't know what you're talking about, and you talk in volumes. Nobody has ever accused me of being "negligent" or "pro corruption" except for you. Words are very cheap, especially when coming from someone who never backs up their accusations. All you do is give opinions, which any ass can do.

I've already said multiple times that while my research will take a lot of time to substantiate enough to be posted publicly, but that does not mean my research isn't compiled enough for me to speak with confidence that the problems exist, that you are aware of it, and that you choose to ignore its existence (thus I suggest pro corruption or negligence on your behalf). I do not plan to post until I am sure that I am ready for every backfire possible (as I'm sure I will receive) through substantiation, and I am sure this could be understood by anyone considering it involves high profile members.

As for being an asshole to you, you repeatedly go out of your way not to deny your awareness of any existence of corruption of high profile members, which is why you're suspected of being negligent or involved. I welcome you to deny existence:
I have no idea about, have no involvement and am not associated with any group who have negatively impacted the forum/community through negative/unethical actions motivated by profit or by manipulating forum mechanisms.

Though I doubt you will...I have welcomed you to do so for a while, yet, you refuse (as did other high profile members who I more than suspect are a part of the problem).

Additionally, when you come to threads like this one and defend an account that is obviously being farmed with such ridiculous reasons like "they are knowledgeable about bitcoin and privacy", adding on what you have already displayed to me in other threads, how could I not reply like how I did?

[nutildah]

Additionally, when you come to threads like this one and defend an account that is obviously being farmed with such ridiculous reasons like "they are knowledgeable about bitcoin and privacy", adding on what you have already displayed to me in other threads, how could I not reply like how I did?

The sensible thing to do would be to confirm or disconfirm what I said for yourself. But you didn't. You immediately started trolling me without doing the slightest bit of research whatsoever. If you had done it, you would have realized that I was correct. Take note, this is what actual research looks like:

Alternative accounts:
https://ninjastic.space/addresses?address=bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Username : pinggoki
Forum Rank : Senior Member
Posts count : 3564 including this post
Address : bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Looking forward to working in this campaign again, hopefully.

BitcoinTalk username: blckhawk
Profile Link: https://bitcointalk.org/index.php?action=profile;u=997120
Rank to apply: Sr. Member
Current post count (including this): 363
BTC address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

I will do my due diligence in preventing scammers from getting their payday and I hope that me reporting these website helps a lot in suspending these websites.

BTC Address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

Am I allowed to participate in this one? I've only been active today and it will feel like I'm taking advantage of this if I didn't ask of this one, seems like it's a good effort to do to prevent phishing from claiming more gullible people as their victims, hopefully I would be allowed.

https://bpip.org/smerit.aspx?from=blckhawk&to=Peanutswar

It gives anyone reading this thread something to confirm for themselves. What you are doing is just going by hunches, the weight of your own ego, and what appears to be the need to be contrarian to anything I have to say.

This is why you will never be on DT:

BenCodie

2025-03-18

Reference

Possible alt account who woke up after the eXch phishing campaign was launched and has previously displayed activities which are in line with account farmers and existing members more than new members since registration. More proof will be collected and posted before being changed to negative.

The smart thing to do would have been present the evidence first and then issue a tag. But you rushed this out because of your insatiable need to contradict me.

[BenCodie]

It gives anyone reading this thread something to confirm for themselves. What you are doing is just going by hunches, the weight of your own ego, and what appears to be the need to be contrarian to anything I have to say.

I'm not going by hunches, there's enough to suggest that Medusah is very likely to be a farmed account. I'll include my rational in another post.

Though lets assume ignorance by all, how would your post saying that the person is not an alt because of their knowledge any different? You also did no research other than comment on their posting style as reason as to why they are not an alt? Is that a real reason? It seems to me more like a cover up, which is why I entered the thread as I did.

Medusah is extremely knowledgeable about Bitcoin and all-things privacy. I don't think they are an alt of the other accounts, which appear to be more generic.

It gives anyone reading this thread something to confirm for themselves. What you are doing is just going by hunches, the weight of your own ego, and what appears to be the need to be contrarian to anything I have to say.

This is why you will never be on DT:

BenCodie

2025-03-18

Reference

Possible alt account who woke up after the eXch phishing campaign was launched and has previously displayed activities which are in line with account farmers and existing members more than new members since registration. More proof will be collected and posted before being changed to negative.

The smart thing to do would have been present the evidence first and then issue a tag. But you rushed this out because of your insatiable need to contradict me.

None of what I said was inaccurate and the rating was not negative. I don't see an issue with my rating and will support it with more information down the line.

This is also not the reason I will not be on DT. I was assured to never be on DT the moment I created a thread that was not in the interest of the groups who benefit and influence the forum most.

I am also hardly surprised to see that you ignored my welcoming for you to clearly deny any idea, involvement or association with any corrupt groups:

As for being an asshole to you, you repeatedly go out of your way not to deny your awareness of any existence of corruption of high profile members, which is why you're suspected of being negligent or involved. I welcome you to deny existence:
I have no idea about, have no involvement and am not associated with any group who have negatively impacted the forum/community through negative/unethical actions motivated by profit or by manipulating forum mechanisms.

lovesmayfamilis I'm sorry that this thread had seemingly effected your trust with me, and I truly hope that the decision to remove the rating was none more than your own, and not suggested or as a result of any kind of manipulation by any other member who claims that I am a troll, when I am not.

[lovesmayfamilis]

lovesmayfamilis I'm sorry that this thread had seemingly effected your trust with me, and I truly hope that the decision to remove the rating was none more than your own, and not suggested or as a result of any kind of manipulation by any other member who claims that I am a troll, when I am not.

I don't understand the reasons for your arguments with many users who lead nowhere. The behavior of a person who regularly argues makes me click the "ignore" button because it is very similar to a troll; besides, I disagree a thousand times with your review about the unprofessionalism and dishonesty of Nutildah.  And yes, I would like to see evidence of the alternative nature of the account you left a review for.

You can be good at security, but still be very arrogant and confrontational. For a man, this is so-so...

[alani123]

I'll be honest, the terms of this campaign were too vague.

Basically you get part of 0.1BTC for any domain that goes down if you just post an address??? What proof is there that the emails sent is connected to the poster for instance, and what proves the singular humanity of each poster posting an address.

eXch meant well but I'm sure they didn't completely think this through. First of all there's going to be a lot of spam against registrars just to grab a piece of juicy rewards. In my view the ideal scenario would have been rewarding those users who could prove they sent an actually readable and common sense letter to registrars. But that's just my style to be honest. Evidently the spamming worked against some registrars already.

But those registrars actually interested into following procedures may want to conduct an investigation first in which case spamming them is likely to take away from the seriousness of the case.

Anyway, it's their campaign. Hopefully they'll implement some common sense policy when distributing funds. Yes, arbitrary decisions do make sense sometimes. Maybe don't disqualify everyone who had an account wake up after years, but at least reduce their part of the rewards to something very small especially if they couldn't be arsed to write a proper letter to registrars. I'm sure even for writing to registrars there's going to be a lot of AI slop.

[eXch Support]

I'll be honest, the terms of this campaign were too vague.

Basically you get part of 0.1BTC for any domain that goes down if you just post an address??? What proof is there that the emails sent is connected to the poster for instance, and what proves the singular humanity of each poster posting an address.

We know exactly what we are doing.

BTC Address: bc1qj2d86v0hcx3myszrlmckpusmmtapm5sz6yr69e

Sorry if I sound dumb, but I'm a bit confused. How will the team determine which reports were done by which users from here since we are only asked to post our Bitcoin address when we wouldn't have our Bitcoin address mentioned in the reports or emails we are going to send?

Hello

No question is dumb, even less when it is a good one.

1. You post your BTC address here
2. You make the report by adding us in CC
3. If the domain is suspended according to the above criteria, we'll contact you by email (this is possible because you will have added us in CC), so we'll ask for your Bitcointalk username.
4. We send the reward

eXch meant well but I'm sure they didn't completely think this through. First of all there's going to be a lot of spam against registrars just to grab a piece of juicy rewards. In my view the ideal scenario would have been rewarding those users who could prove they sent an actually readable and common sense letter to registrars. But that's just my style to be honest. Evidently the spamming worked against some registrars already.

But those registrars actually interested into following procedures may want to conduct an investigation first in which case spamming them is likely to take away from the seriousness of the case.

Anyway, it's their campaign. Hopefully they'll implement some common sense policy when distributing funds. Yes, arbitrary decisions do make sense sometimes. Maybe don't disqualify everyone who had an account wake up after years, but at least reduce their part of the rewards to something very small especially if they couldn't be arsed to write a proper letter to registrars. I'm sure even for writing to registrars there's going to be a lot of AI slop.

Don't take it wrong, but do you really think that a company puts so much money on the table without conducting real verification of the work done?
We can read everything, check everything, because to be able to claim the reward, we have to be in CC.

[alani123]

eXch is a good project putting a lot of effort towards providing a much needed service so I can say that I trust in your conscience. Don't get me wrong either, I'm not accusing you of doing anything wrong and I'm sure you know what you're doing.

But here's the thing, the vagueness in the thread along with the large amount of money on the line gave incentive for many likely hacked or farmed accounts to be activated from their hibernation. Should something be done about it? Maybe, maybe not. These dubious accounts and spammers are mostly exposing themselves so just by some pedestrian discussion like what we're doing here it's easy to discover their scheme.

[logfiles]

I'll be honest, the terms of this campaign were too vague.

Basically you get part of 0.1BTC for any domain that goes down if you just post an address??? What proof is there that the emails sent is connected to the poster for instance, and what proves the singular humanity of each poster posting an address.

I am not part of the Exch staff/team or advertiser, but if you took time to read the Announcement and thread, you would not be writing this paragraphs. Everything is clear on how they will know who to distribute the reward to.

eXch meant well but I'm sure they didn't completely think this through.

They did think through it so well, you clearly didn't  

First of all there's going to be a lot of spam against registrars just to grab a piece of juicy rewards. In my view the ideal scenario would have been rewarding those users who could prove they sent an actually readable and common sense letter to registrars. But that's just my style to be honest. Evidently the spamming worked against some registrars already.

But those registrars actually interested into following procedures may want to conduct an investigation first in which case spamming them is likely to take away from the seriousness of the case.

For your information, two domains have already been brought down within a few days... so, isn't that effective according to you yet?

Those who try to cheat their way through may still receive nothing, but at the end of the day, what matters most if they don't have any notorious phishing domains jeopardizing their service.

But here's the thing, the vagueness in the thread along with the large amount of money on the line gave incentive for many likely hacked or farmed accounts to be activated from their hibernation. Should something be done about it?

Stop worrying about the Bitcoins they are offering. They have spent way more in donations and other things.