[WARNING] Pancono Bounty is a Scam – Fake Rewards, No Real Mining, Malware Risk

[albon]

What happened::

This user posted a bounty for a project called Pancono. It’s worth noting that, based on several red flags, this looks very risky and probably a scam

One red flag is that they’re using a subdomain -> gamer.gd which is just a free hosting service [InfinityFree]



Second, the whole idea behind earning on this site is to push users to share referral links, invite others, and click on links to earn USDT.

Bounty Program & Earning Starts From Here.

First Sign-Up here:

pancono[.]gamer.gd/partner.registration.index.html


Follow Below Steps to Earn up to 100 USDT & Pancono Coins:

Step 1:  Click below link, go to web app and copy your Invite link.

pancono[.]gamer.gd/pancono.claim.airdrop.index.html?inv=239

Step 2: Come back here and click below links of other Pancono members to earn 20 USDT & Panno coins instantly.

pancono[.]gamer.gd/pancono.claim.airdrop.index.html?inv=2385
pancono[.]gamer.gd/pancono.claim.airdrop.index.html?inv=D32

Your total earnings - check the web app.

Step 3:  Comment your invite link from below so I can connect with you.

Connecting with other Pancono members is the main task of this bounty program.

Also, it doesn’t make sense to offer 100 USDT and Pancono Coins just for clicking links.

In addition, what they call "Group Mining" and "Solo Mining" is nothing more than a 5-minute timer and does not represent any real mining activity.

Code:

// -------- CONFIGURATION --------
const SESSION_TIME = 300;     // 5 minutes
const REWARD_RATE = 5;       // 5 PANNO per second

// -------- RUN SESSION --------
function processMining(){
  clearInterval(miningLoop);
  miningLoop = setInterval(()=>{
    const now = Math.floor(Date.now()/1000);
    const begin = Number(localStorage.getItem("panno_session_start"));
    const passed = now - begin;    
    
    // ... (logic to increment balance locally)
    const minedAmount = passed * REWARD_RATE;
    localStorage.setItem("panno_session_gain", minedAmount);
    document.getElementById("earned").innerText = minedAmount;
  },1000);
}

this is all fake and runs on your browser. It uses simple JavaScript localStorage to fake mining with no real blockchain involvedn.  

More concerning is that they are hosting a wallet download on this free hosting service, which raises serious suspicion that it could be malware:

Code:

https://pancono.gamer.gd/corewallet/Pancono.Core.Wallet.zip

The primary source of the malware is hosted on GitHub. > DO NOT download any files from: https://github.com/ChaserOd/
The attacker is using this profile to host various versions of trojanized wallets under different "project" names.




Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=969398  | FLAG

Reference Link:

[1] 💵💲Pancono Coin: Earn 10 USDT on Each Task Through Bounty Program.
[2] 🎁 [[ New Pancono Bounty ]] 💰 [[ Earn Rewards]] 🏆 [[ TASK: POST AT FB/X ]] 🤑
[3] 🚀 🚀 Launch Your Own Crypto Airdrop for FREE — No Coding, No Cost
[4] 👀Looking for a Co-founders, Partners, Ambassadors for a Crypto Airdrop Project.
[5] Pancono L1 Blockchain💎Full Node Architect💎POW 💎LevelDB-based storage.
[6] [[ANN]] NEW PANNO COIN Blockchain: Based on SHA256 Cryptographic Hash Function.
[7] 🚀🌍 Pancono Coin Featured on Bitget – Big Milestone Achieved. Join the Airdrop.
[8] 📢 👉 Pancono Coin Blockchain is Launched: Claim Your PANNO Coins & Core Wallet.
[9] Interested in Joining as Ambassador For a New Airdrop Project? PANCONO COIN..
[10] Pancono Coin Airdrop Updated: Earn 10 USDT on simple task- including Panno Coins
[11] 🔔📢 Launch Your New Coin - Get L 1 Blockchain, Airdrop Webpage, Core wallet.
[12] [[ANN]] Pancono Coin to the Next Level - PANNO & USDT Earnings ADDED. 💲💲💲.
[13] 🎁 [[Pancono Bounty]] 💰 [[ Earn Rewards]] 🏆 [[ TASK: POST AT FB/X ]] 🤑
[14] [[ANN]] Pancono Core Wallet & PANNO Coin(Similar to Bitcoin Core). Claim Now
[15] [[ANN]] 🚀🚀 Pancono Airdrop is now officially listed on CoinGabbar. Check it.
[16] [[[ANN]] The Pancono Core Wallet. Designed similar to the Bitcoin Core wallet.


[17] pancono[dot]gamer.gd


Additional Notes:
Important warning: Do not download the wallet from their free domain. Do not enter your email, provide your wallet address, or connect your wallet. This is a clear scam.

[GxSTxV]

Unfortunately, these people are getting creative with their ideas and targeting the perfect audience for them with smart tools. I believe this trojan or virus included with the fake wallet they are advertising is silent which means that it will be active only when you open a wallet in your infected device and steal your available assets or once you receive a transaction.

It happened to me before, downloading simple apps on random websites or shady sources even while using anti malware tools wasn’t enough to infect my wallet and got scammed this way.

Thank you so much for your warnings dear friend. Let’s remind the community that anything looking like an easy money is most likely a scam attempt.

[Mikasa mei]

Got hit by this exact same bounty trap. I downloaded the wallet and didn't even run the setup and the window just spawned on its own, and minutes later my Telegram was hacked, Luckily it was only my Telegram and I moved fast to secure all my other accounts and funds

The craziest part? I didn't even receive an SMS an OTP or any login notification on my phone. They completely bypassed it !!!

[albon]

Unfortunately, these people are getting creative with their ideas and targeting the perfect audience for them with smart tools. I believe this trojan or virus included with the fake wallet they are advertising is silent which means that it will be active only when you open a wallet in your infected device and steal your available assets or once you receive a transaction.

It happened to me before, downloading simple apps on random websites or shady sources even while using anti malware tools wasn’t enough to infect my wallet and got scammed this way.

Thank you so much for your warnings dear friend. Let’s remind the community that anything looking like an easy money is most likely a scam attempt.

Yes, that’s correct. .This reminds everyone here to only download from official/trusted sources and to verify the security of any wallet or executable extension before installing it on their devices.

I would also like to point out regarding GitHub; often, the versions provided as open-source code are safe and available for review whereas the pre-compiled binaries found on suspicious websites are the ones typically injected with malware and virus.

In some cases, attackers use advanced encryption algorithms and polymorphic code which can allow malware to bypass antivirus software undetected.

Got hit by this exact same bounty trap. I downloaded the wallet and didn't even run the setup and the window just spawned on its own, and minutes later my Telegram was hacked, Luckily it was only my Telegram and I moved fast to secure all my other accounts and funds

The craziest part? I didn't even receive an SMS an OTP or any login notification on my phone. They completely bypassed it !!!

Sorry to hear that. You may have triggered an autorun file, which allowed the infected wallet to execute automatically on your computer. It’s clear they hijacked your Telegram session. Were you able to recover it, given that you still have the SIM card you used to activate the account?

I hope you secured your other accounts using a different, uninfected device, and not the one where you downloaded that wallet. You definitely need to reinstall your OS and format your C drive.

[AakZaki]

I can't stop thinking about why he hasn't been banned either, I've also reported the thread they made here. The thread I reported had been deleted, and now he was acting again, trying to cheat again.
People like him have no deterrent until their account is actually Banned.

-snip-

The craziest part? I didn't even receive an SMS an OTP or any login notification on my phone. They completely bypassed it !!!

It's crazy how sophisticated scammers do, I hope in the future you don't click on links you don't know because it's very risky.

[DaveF]

Just plug any of his URL links into virustotal.com and they come back as phishing / malicious

https://www.virustotal.com/gui/url/276c3c87d663ba1e3d9660cd0113f9e94888f460aaa6f7bd2f2dcb474b25427f?nocache=1

All his posts need to be reported.

-Dave

[The Cryptovator]

Tagged him and supported the raised flag. It seems they are trying to scam from all sides, like spreading malware and Ponzi schemes as well. They don't want to miss any possible chances to scam people; thank you for noticing it and sharing it with the community. It's better to expose and tag them to warn people, because sometimes greedy people still fall into such traps.

Everyone should stay away from this scammer; there is no such money-making machine to make you rich overnight. All of their promises are just fake; it seems this user is heavily trying to promote this scam. This user should be nuked for spreading malware, though scams aren't moderating. Tag is fine for the scam attempt; the rest should be handled by the moderator.

[JeromeTash]

I am still suprised that the account has not been banned/nuked or all the posts deleted. Usually such accounts get banned with in a few minutes to hours. I hope the modeerators do the needful

I am going to tag the account and support the flag raised against the account in the meantime.

[Mikasa mei]

Unfortunately, these people are getting creative with their ideas and targeting the perfect audience for them with smart tools. I believe this trojan or virus included with the fake wallet they are advertising is silent which means that it will be active only when you open a wallet in your infected device and steal your available assets or once you receive a transaction.

It happened to me before, downloading simple apps on random websites or shady sources even while using anti malware tools wasn’t enough to infect my wallet and got scammed this way.

Thank you so much for your warnings dear friend. Let’s remind the community that anything looking like an easy money is most likely a scam attempt.

Yes, that’s correct. .This reminds everyone here to only download from official/trusted sources and to verify the security of any wallet or executable extension before installing it on their devices.

I would also like to point out regarding GitHub; often, the versions provided as open-source code are safe and available for review whereas the pre-compiled binaries found on suspicious websites are the ones typically injected with malware and virus.

In some cases, attackers use advanced encryption algorithms and polymorphic code which can allow malware to bypass antivirus software undetected.

Got hit by this exact same bounty trap. I downloaded the wallet and didn't even run the setup and the window just spawned on its own, and minutes later my Telegram was hacked, Luckily it was only my Telegram and I moved fast to secure all my other accounts and funds

The craziest part? I didn't even receive an SMS an OTP or any login notification on my phone. They completely bypassed it !!!

Sorry to hear that. You may have triggered an autorun file, which allowed the infected wallet to execute automatically on your computer. It’s clear they hijacked your Telegram session. Were you able to recover it, given that you still have the SIM card you used to activate the account?

I hope you secured your other accounts using a different, uninfected device, and not the one where you downloaded that wallet. You definitely need to reinstall your OS and format your C drive.

Yeah I still have the SIM, but whenever I try to log in I keep getting a (too many attempts) error even after waiting over 48 hours it's always the same

I contacted Telegram support, and yesterday when I tried logging in again, they gave me the option to reset my account since I hadn't secured it properly. I took it because I don't want anyone using my identity to scam people

I definitely learned the hard way and i really thought it was a trusted bounty since they have a thread here on the forum, but it is what it is i have now secured my account with my phone and completely reset my desktop

https://www.talkimg.com/images/2026/04/15/Uf6VpG.jpeg

[albon]

I can't stop thinking about why he hasn't been banned either, I've also reported the thread they made here.

I am still suprised that the account has not been banned/nuked or all the posts deleted. Usually such accounts get banned with in a few minutes to hours. I hope the modeerators do the needful

This user should be nuked for spreading malware, though scams aren't moderating. Tag is fine for the scam attempt; the rest should be handled by the moderator.

I have good news regarding this member and his scam posts. Thanks to logfiles for bringing this to my attention. Here is his quote:

The good news is that the account has now been banned. I believe most of the malicious posts or spam have also been deleted. Took quite a bit of time, but all is good now.

Yeah I still have the SIM, but whenever I try to log in I keep getting a (too many attempts) error even after waiting over 48 hours it's always the same

I contacted Telegram support, and yesterday when I tried logging in again, they gave me the option to reset my account since I hadn't secured it properly. I took it because I don't want anyone using my identity to scam people

You need, after you’ve reset it, to enable two-step verification and a local passcode. It’s also better to use passkeys.

Always check your active sessions, and if you notice anything unusual, click -> terminate session.

I definitely learned the hard way and i really thought it was a trusted bounty since they have a thread here on the forum, but it is what it is i have now secured my account with my phone and completely reset my desktop

This reminds you to always verify before trusting. It’s also better to join bounties manage by well-known bounty managers, rather than newbie BM accounts. Always DYOR.

In any case, this scammer has now been banned, but he may create an alt account and return, so be more careful next time.