Notes

I submitted the same suggestion to steemit.com. This one is for busy.org

Power Down Route

Recently, a user's Steem account was hacked. The thief added himself to the victim's active key authorization. Furthermore, the thief sets the victim's vesting withdraw route to himself:

This means that if the victim starts a power down, the STEEMs will go to the thief's account directly. The victim was not aware the the route was set to the thief's account.

The suggestion

To protect the users, busy.org can show the vesting withdraw route in the wallet, so the users be aware of the withdraw route.