About half a year ago I made a post about tin foil security implemented by many asshanded CEXes and CeFis (well, by some DEXes and DeFis too). The main idea was that instead of improving their own project's security, many asshanded monkeys keep demanding from end users for passwords, pins, and moar lengthier passwords.
Well, nevermind.
Recently I've got an email:
Hey Celsians!
Have you heard the news?! We're thrilled to share that the Celsius Web Wallet is officially live! Celsius is surpassing milestones faster than you can say "Satoshi Nakomoto" - and it’s all thanks to YOU!
To celebrate the launch of our new web wallet, we're giving away $500 in CEL with the promo code WEBWALLET500 for a limited time only!
Celsius Web Wallet
How to receive $500 CEL:
Create your Celsius Web Wallet by following the steps for the wallet creation process.
Include your promo code WEBWALLET500 to claim $500 in CEL after completing registration.
Follow the step-by-step tutorial on how the Celsius Web Wallet works.
Tune in to our AMA tomorrow with Alex for a more detailed update on this milestone and a preview of other exciting news on the horizon.
Once again, we are extremely grateful for your individual contributions to our collective growth as a platform and as a community.
Onward & Upward,
Team Celsius
The link to the "web wallet" was pointing to some shady website celsiuswallet.network:
To create a "Celsius Web Wallet" you are asked to "connect with Metamask/Trezor/etc" first, and when it fails (surprise!) -- you're asked to "import" your account: to put your wallet's private key or seed phrase into a special form on the site.
Needless to say that after submitting a wallet's private keys the funds in the wallet will most probably be gone quickly and forever.
But do you know what's the most interesting thing here?
The email address I use for my real Celsius is not an email address I put into every asshole I find on the internets. Besides, this email is pretty hard to guess or to get with some brute force combinatorics.
In other words, the cheapest, fastest, and simplest way to know my Celsius email is to get it from Celsius...
