Arkham Intelligence? Doxxing users isn’t that smart
Following the announcement of its new crypto intel marketplace on Monday, Arkham Intelligence has seen a resurgence of complaints about the company’s method of generating referral links.
Twitter users quickly discovered that they could take appended data from Arkham’s referrals, plug the information into a Base64 decoder, and come away with the poster’s full email address.
To verify those claims, Blockworks took a number of referral links, including one posted by a Twitter user back in December 2022, and pasted them into a Base64 decoder. Each one spat out a full email address.
Some users have even begun generating fake referral links and posting them to Twitter, as a way to have a laugh at Arkham. Blockworks happened upon fake emails such as [email protected] and [email protected], among others.
Arkham representatives did not immediately return a request for comment regarding whether the project intends to change its Base64-encoded referral links. Twitter users who posted their referral links likewise did not immediately return requests for comment.
M4gicpotato on Twitter was one of the first to point out Arkham’s error in an all-caps post, calling out the company for allowing users to unwittingly doxx their personal information.
Another user, Matsumoto, shared a direct message conversation that allegedly took place with Arkham back in January. The company appeared to acknowledge the problem several months ago, though it seems to have taken no action to fix the issue since.
On Monday, Arkham launched the Arkham Intel Exchange, a platform that enables users to purchase and auction valuable information pertaining to the cryptocurrency space. Twitter users quickly began to speculate that the practice would grant financial gain for unearthing personal and private information — a practice that could be dangerous if misused.
Concerns also emerged regarding a perceived lack of decentralization on the platform, stemming from the fact that the Arkham Foundation assumes the responsibility of reviewing and approving auctions and bounties.
Get the day’s top crypto news and insights delivered to your email every evening. Subscribe to Blockworks’ free newsletter now.
Want alpha sent directly to your inbox? Get degen trade ideas, governance updates, token performance, can’t-miss tweets and more from Blockworks Research’s Daily Debrief.
Can’t wait? Get our news the fastest way possible. Join us on Telegram and follow us on Google News.