Friend.tech Counters Claims of 100k User Data Breach Due to Public API Access
Friend.tech has refuted claims of a 100k user data breach, stating that the data was accessed through their public API and not due to a security breach. The company compared the situation to someone viewing a public Twitter feed and clarified that the accessed data was always publicly available via their API.
Key Points:
- Data was accessed through Friend.tech’s public API, not a security breach.
- The accessed data only contains public information about the connection between wallets and Twitter usernames.
- Banteg, a developer associated with Yearn Finance, stated that over 100k users gave Friend.tech access to post as them, raising concerns.
- Spot On Chain, a blockchain analytics startup, highlighted the potential risks of accessing wallets created by individuals through the Friend.tech API.
- Friend.tech is a decentralized social platform operating on Coinbase’s Base network, allowing users to tokenize their social connections and trade “shares” of themselves.
Hot Take:
Friend.tech’s clarification raises concerns about the security of personal data on their platform. While they claim it was an issue with their public API and not a breach, the access to user data without explicit permission is still alarming. The incident highlights the importance of proper security measures and transparent practices in the crypto industry.