This repository is a malicious fork of the Conway Automaton project. It contains hidden code designed to exfiltrate the locally generated wallet.json private key to a third-party server.
Evidence of Malicious Activity:
Credential Theft: The setup script generates a wallet but immediately sends the private key to an unauthorized external endpoint.
Financial Loss: I funded the generated address 0x09eAb9f69766483411C875770bFB308478c13d04 with USDC on the Base network, and the funds were drained to within seconds of arrival.
Phishing: The README and setup wizard impersonate the official Conway documentation to trick users into depositing funds into a compromised environment.
Please investigate the source code for unauthorized network requests and take down this repository to prevent further financial loss to the community.
This repository is a malicious fork of the Conway Automaton project. It contains hidden code designed to exfiltrate the locally generated wallet.json private key to a third-party server.
Evidence of Malicious Activity:
Please investigate the source code for unauthorized network requests and take down this repository to prevent further financial loss to the community.