Arkham Intelligence? Doxxing users isn’t that smart

The lunatics really have taken over the asylum

article-image

Kiselev Andrey Valerevich/Shutterstock modified by Blockworks

share

Following the announcement of its new crypto intel marketplace on Monday, Arkham Intelligence has seen a resurgence of complaints about the company’s method of generating referral links.

Twitter users quickly discovered that they could take appended data from Arkham’s referrals, plug the information into a Base64 decoder, and come away with the poster’s full email address. 

To verify those claims, Blockworks took a number of referral links, including one posted by a Twitter user back in December 2022, and pasted them into a Base64 decoder. Each one spat out a full email address.

Some users have even begun generating fake referral links and posting them to Twitter, as a way to have a laugh at Arkham. Blockworks happened upon fake emails such as [email protected] and [email protected], among others.

Arkham CEO Miguel Morel responded to the controversy at 6:22pm ET on Twitter, saying that Arkham engineered the links this way in its beta. He said it was so that the company could track which users were referring others so they could be rewarded. 

Morel said that the referral links were “not a way to collect user emails—users already use their emails when they sign up for the platform and get a ref link. We do not use them for anything other than communicating with users and attributing referrals.”

He continued, “We should have changed this system after our user base increased exponentially. Going forward, all referral links will contain an encrypted version of the referrer’s email so that it cannot be reverse-engineered. This change is already live.”

M4gicpotato on Twitter was one of the first to point out Arkham’s error in an all-caps post, calling out the company for allowing users to unwittingly doxx their personal information.

Loading Tweet..

Another user, Matsumoto, shared a direct message conversation that allegedly took place with Arkham back in January. The company appeared to acknowledge the problem several months ago, though it seems to have taken no action to fix the issue since.

Loading Tweet..

On Monday, Arkham launched the Arkham Intel Exchange, a platform that enables users to purchase and auction valuable information pertaining to the cryptocurrency space. Twitter users quickly began to speculate that the practice would grant financial gain for unearthing personal and private information — a practice that could be dangerous if misused.

Concerns also emerged regarding a perceived lack of decentralization on the platform, stemming from the fact that the Arkham Foundation assumes the responsibility of reviewing and approving auctions and bounties.

Updated July 10th at 8:04pm with public comments from Arkham CEO Miguel Morel.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Permissionless is a conference for founders, application developers, and users. Come meet the next generation of people building and using crypto.

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

4.png

Research

This months PPGC covered four main areas. Firstly, debriefing the progress and status of the mainnet implementation of the Ahmedabad hard fork. Secondly, a retrospective on the testnet phase of the Ahemdabad Hard Fork. Thirdly, an update on PIP-36 which involves replaying failed state syncs. Lastly, PIP-47 which pushes upgrades to the Polygon Protocol Council.

article-image

Institutions to test out the settlement of “digital assets and currencies” on a network that annually carries more than 5 billion financial messages

article-image

After Bitwise’s XRP ETF filing this week, one industry watcher notes: “Politics will determine whether this happens soon or in a few years”

article-image

Plus, a look back at some of the SEC’s biggest enforcement moves under Gurbir Grewal

article-image

The forward-looking financial system is being championed by several contributors to India’s UPI digital money system

article-image

Multiple teams are pursuing integration cross-chain and off-chain

article-image

An SEC spokesperson told Blockworks the Ripple judgment clashes with Supreme Court precedent and securities laws