hello, I'm @ayogom.
I'm sorry. I've used an exciting title. No one has ever been hacked yet, but I think it's very likely.

Do you know how Steemmonsters are operated?

The Steemmonsters use "custom json" to conduct all activities such as battles and card transactions.
The permissions of "custom json" can be controlled by the posting key. That's why the Steemmonsters can only login with a posting key.

Why is the use of "custom json" dangerous?

Many sites using steemconnect require "custom json".
I used 10 steemconnect as below.

	tripsteem - Custom Json (O) tasteem - Custom Json (O) steempeak - Custom Json (O) steemhunt - Custom Json (O) steemgazua - Custom Json (X) steemplus - Custom Json (O) PeakMonsters - Custom Json (O) Artisteem - Custom Json (O) dclick - Custom Json (O) busy - Custom Json (O)

Nine of the sites that I delegated authority have asked me for "Custom Json"

The steemconnect is safe. But accidents can happen.
Do you happen to remember the hacking incident in Utopia?
Utopian.io Hack - May 3rd - May 4th 2018. No Wallets Or Keys Compromised.

In this case, we were only affected by the right to vote.
However, if you are a Steemmonsters user, it does not affect voting only. You can steal your card using "Custom Json".

Unlike Steem's wallet, the SteemMonster's card wallet is managed using "Custom Json", so even if you manage your posting keys well, you can lose with the token loss of the steemconnect. This is just a possibility, but I think I can never ignore it.

Solution

I recommend creating a new account for only Steemmonsters. And do not connect the steemconnect.
If you only use the posting key, you only need to manage your posting key.
However, if you connect the steemconnect, you should consider hacking your site as well as your own mistakes. It means that there are many ways to be stolen.
Every decision is my own. And responsible for my actions. Then look forward to your luck.

How to Disconnect the steemconnect.

1. https://steemconnect.com/apps/authorized
2. click to Revoke

I love steemmonsters and steemconnect 👍😎.

---

_{Sponsored ( Powered by dclick )}

심해생물 보틀캡 (The Deep Sea Odyssey)

^{The Deep Sea Odyssey 심해생물 안녕하세요. 키위파이입니다. 오늘은 간만에 보틀...}

이 글은 스팀 기반 광고 플랫폼
dclick 에 의해 작성 되었습니다.