MoversSomeguy↓416Afi↓374Grethos↓351aadvark↓277Majdi↓266TradeSk0rp.eth↑48.8%Ethos↓1.5%Brandon scott↑1.0%vitalik.eth↑1.7%VouchesDpuck (bob)50 WHUF → freshout.ape 🍄🦍Samorityanin🧢20 WHUF → Stonks SurferBrandon scott9 WHUF → 一川drive 🔴Brandon scott9 WHUF → AndrewDReviewsMark Karpelèspositive · 87 upvotesaiobkhan ✨positive · 71 upvotesCryptoPasokospositive · 46 upvotesRiyonegative · 41 upvotes
Profile· Known@miyaspokeofthisOn Ethos
Username McUserface ( ͠° ͟ʖ ͡°)

Username McUserface ( ͠° ͟ʖ ͡°)

28 reviews, 61% of them positive; 100 WHUF vouched for them by 1 person.61% positive · 28 reviews· 100 WHUF vouched· Influence factor 14, above 3% of accounts

The record

From 25 activities · Apr 2026

A prolific contributor known for sharp analysis of scams, rugs, and protocol mechanics, with deep expertise in crypto, cybersecurity, and privacy narratives. Consistently calls out low-effort reviews and bad actors in the community, though critics dispute whether their negative reviews are always thoroughly investigated or sometimes driven by personal disputes rather than objective analysis.

“onchain lottery, onchain gambling. same same, but somehow different?”I tested out Megapot due to the free tickets for people with a 1400+ score. One of my tickets hit a $2.06 win. At this point Megapot presents you with two options: 1) Buy 2 tickets for $2 using the balance. 2) Claim $2.06 to your wallet (Requires KYC) -> https://imgur.com/a/Q8ua3kr If you go into the details of the KYC policy, you will find this: >5.1 Information Collection Collect from all players: Full legal name. Date of birth (to confirm minimum legal age). Nationality. Residential address. Contact information (email and phone number). Payment information (e.g., bank account or e-wallet details). >5.2 Document Verification Obtain and verify the following documents: Proof of Identity >Valid government-issued ID, such as: Passport. National ID card. Driver’s license. The ID must contain the player’s photo, name, and date of birth. >Proof of Address Recent utility bill, bank statement, or government correspondence (not older than three months). Payment Verification Proof of employment (such as a recent paystub) and self-reported annual income to verify the source of funds being used to fund the player’s digital Wallet. >Retention Period Retain all KYC documents, transaction records, and communication logs for a minimum of five (5) years after the business relationship ends. >Privacy policy "We use commercially reasonable administrative, technical, and organizational safeguards designed to protect the personal information we collect. However, no security measures are failsafe, and we cannot guarantee the security of your personal information. Any documents used for KYC are processed, and stored securely, by our verification provider." They mention you can learn more about those safeguards, but they aren't written anywhere: "You can contact us at any time to find out more about these safeguards as described in the “Contact Us” section" A lot of the discussion happened in the replies to this review. Their KYC provider safeguarding user data is SumSub. They very recently notified users that threat actors had unauthorized access to sensitive data for 1.5 years - between July 2024 and February 2026 (!!!) https://x.com/zachxbt/status/2020864976693424431 https://x.com/miyaspokeofthis/status/2020916026553081927 In my case - to claim the $2.06 I won - I would have to send them my full legal name, DOB, nationality, residential address, contact data, passport/id/drivers license, utility bill/bank statement and proof of employment. Which then gets stored for 5 years "after the business relationship ends". And the platform safeguarding the user data failed to detect unauthorized access for 1.5 years. Ouch! I am one of those people that value their data and privacy, so doing all of that for $2 is definitely not something I would even consider doing. Even if you only used free tickets with no deposits from your public wallet, the wallet sign in and NFT tickets still create a connection between all that data and your wallet. Someone out there will know everything about you. Your wallet, your name, your contact data, your employer. It's basically a perfect dataset for spearphising purposes. When you consider that the platform handling their KYC didn't detect unauthorized access for 1.5 years - how confident are you about providing them with your data? Is it worth the risk for $2? 10? 100? 1000? This does create an incentive for players to roll over their winnings into more tickets until they hit it "big enough" to actually justify sending all that data. Which means payouts become mainly valid if you actually hit a 6 figure jackpot, otherwise you will most likely just roll over your "winnings" into more tickets. Which means a lot of the "winnings" won't leave the platform but rather be rolled over into more tickets until you (maybe) hit it big. You most likely won't, and all the "winnings" you rolled over into more tickets will be absorbed back into the pool. It's beneficial for the platform and their pool, but it means that a lot of the smaller wins will never leave the platform - unless the users willingly hand out their PII for $2 or bypass KYC entirely. The funniest part of it all is that you don't even need to provide them all that data (!!!) This is also written in the KYC docs: >"It may be technically possible for a miniscule number of very sophisticated users to access their embedded wallet outside the platform’s standard withdrawal process. The platform requires KYC for all withdrawals initiated through its interface, however, certain such external uses may not be fully detectable or subject to monitoring." lol, lmao even. Their KYC requirements can be bypassed by "a miniscule number of very sophisticated users" = aka anyone who knows how to ask their AI of choice about accessing a websites embedded wallet. Very sophisticated indeed. Much regulation wow! Can't believe I'm saying those words, but IRL lotteries and actual casinos might be a "safer bet" if you don't want to create a massive personal data + wallet connection that will probably get you spearphished at some point. Or you know, just do the KYC bypass they describe in their KYC policy by extracting the embedded wallet 😹 On one hand they are complaint with their KYC data gathering. On the other they aren't because they point the users towards a bypass of their reporting obligations. Some lawyer out there will start salivating after reading the docs. They also talk about data safeguarding but their exact KYC provider failed to detect unauthorized access for 1.5 years. They should have done more research on KYC providers. Not really confidence inspiring that they didn't. (If they actually did research KYC providers then it's even more concerning that they went with SumSub given their unauthorized access detection whoopsie and failure to detect it for 1.5 years.) I highly suggest going over the discussion in the comments of this review. Patrick from Megapot replied this: >KYC isn't required on deposits, only on withdrawals, regardless of amount. That's a regulatory obligation tied to our real money gaming license, not a policy choice we get to dial up or down per win size. But then there's this: https://basescan.org/tx/0x21dffe118165296886abfef587588b0e78ca45b617934b28406232d7a1908d42 This wasn't done via the embedded wallet bypass. It was done directly via the Megapot frontend (!) And it was done without KYC. There goes the regulatory obligation and compliance. Two things are at play here. Users are able to withdraw via the frontend without KYC -> there goes the regulatory compliance. Plausible deniability re: KYC bypass (the embedded wallet method) also goes out of the window when the platform makes their users aware via their KYC docs that they can bypass KYC requirements. They're opening themselves up to some major regulatory scrutiny, all while putting user data at risk by using SumSub as the KYC provider. Megapot has a lot of kinks to work out. The highest priority, because user safety and data safeguarding depends on it, would be using a different provider than SumSub. That's something they need to IMMEDIATELY look into. Definitely recommend looking at the discussion in the replies under this review. A lot of my critique isn't just bashing the platform for no reason, but rather pointing out valid pain points for both users and the platform. Like user data safety and compliance.on Megapot · 1495· 5mo ago · negative59
“coordinated review bombing to inflate score and get Credifi money”This profile, which is inactive on ethos, received over 30 reviews today. All from freshly made accounts. https://imgur.com/a/1GLa91q Looks like Nazim was coordinating review bombing of his profile, even though he previously said that "Ethos is a Foking Scam ❌❌ i Don't Know Why people Use This Foken app 🤣🤣🤣" (https://x.com/shahrianazim6/status/1983260139642560567) All of those profiles that reviewed Nazim are freshly made profiles, first activity is reviewing Nazim. Then sometimes requesting human verification. Multiple of those profiles are also cross-reviewing each other. This is highly coordinated activity. The profiles that invited those people: [Rifu](https://app.ethos.network/profile/0x89C2a31F2052862257516F9415AA05bAfad37560) 10 profiles [Foyeaj](https://app.ethos.network/profile/0xF3E4565081dDCBac2494964C9ab74a46D845544e) 7 profiles [Zuel](https://app.ethos.network/profile/0x93d7BEABFA25091e7Ecb7a89AA2DEc2805552A22) 6 profiles [SKYSTAR](https://app.ethos.network/profile/0xc5f69A19A896EBEbFD346462228B3194CD45b9E1) 5 profiles [O⁠_⁠o](https://app.ethos.network/profile/0x350DB48b6DF496D0Bb257C8356a447fd437D327E) 4 profiles [Abid.eth](https://app.ethos.network/profile/0xBA36547F43e271e481eEd34CbBA6541f22F22947) 3 profiles They were still inviting new users while I was writing it, so the numbers might go up. The purpose of the reviewbombing and cross-reviewing? Inflating reputation and faking 1800 score to get the no-KYC / no collateral Credifi money: https://imgur.com/a/0FhRQI6 https://imgur.com/a/fOmhfInon Nazim · 1347· 50d ago · negative39
‹ Back48 of 241 · most upvoted firstMore ›