Arkham Intelligence? Doxxing users isn’t that smart
The lunatics really have taken over the asylum
Kiselev Andrey Valerevich/Shutterstock modified by Blockworks
Following the announcement of its new crypto intel marketplace on Monday, Arkham Intelligence has seen a resurgence of complaints about the company’s method of generating referral links.
Twitter users quickly discovered that they could take appended data from Arkham’s referrals, plug the information into a Base64 decoder, and come away with the poster’s full email address.
To verify those claims, Blockworks took a number of referral links, including one posted by a Twitter user back in December 2022, and pasted them into a Base64 decoder. Each one spat out a full email address.
Some users have even begun generating fake referral links and posting them to Twitter, as a way to have a laugh at Arkham. Blockworks happened upon fake emails such as [email protected] and [email protected], among others.
Arkham CEO Miguel Morel responded to the controversy at 6:22pm ET on Twitter, saying that Arkham engineered the links this way in its beta. He said it was so that the company could track which users were referring others so they could be rewarded.
Morel said that the referral links were “not a way to collect user emails—users already use their emails when they sign up for the platform and get a ref link. We do not use them for anything other than communicating with users and attributing referrals.”
He continued, “We should have changed this system after our user base increased exponentially. Going forward, all referral links will contain an encrypted version of the referrer’s email so that it cannot be reverse-engineered. This change is already live.”
M4gicpotato on Twitter was one of the first to point out Arkham’s error in an all-caps post, calling out the company for allowing users to unwittingly doxx their personal information.
Another user, Matsumoto, shared a direct message conversation that allegedly took place with Arkham back in January. The company appeared to acknowledge the problem several months ago, though it seems to have taken no action to fix the issue since.
On Monday, Arkham launched the Arkham Intel Exchange, a platform that enables users to purchase and auction valuable information pertaining to the cryptocurrency space. Twitter users quickly began to speculate that the practice would grant financial gain for unearthing personal and private information — a practice that could be dangerous if misused.
Concerns also emerged regarding a perceived lack of decentralization on the platform, stemming from the fact that the Arkham Foundation assumes the responsibility of reviewing and approving auctions and bounties.
Updated July 10th at 8:04pm with public comments from Arkham CEO Miguel Morel.
Get the news in your inbox. Explore Blockworks newsletters:
- Blockworks Daily: The newsletter that helps thousands of investors understand crypto and the markets, by Byron Gilliam.
- Empire: Start your morning with the top news and analysis to inform your day in crypto.
- Forward Guidance: Reporting and analysis on the growing intersection of crypto and macroeconomics, policy and finance.
- 0xResearch: Alpha directly in your inbox. Market highlights, data, degen trade ideas, governance updates, token performance and more.
- Lightspeed: Built for Solana investors, developers and community members. The latest from one of crypto’s hottest networks.
- The Drop: For crypto collectors and traders, covering apps, games, memes and more.
