Qi Hu

Accidental entrepreneur, Dinosaur poker player, Sometimes MMA Fan, Aspiring Asian dad meme.

[Qi Hu @qihu00]

For those I interact financially with on any basis, please consider me 100% compromised and don't interact me with in any shape or form. I have strong reason to believe I can be deepfaked with video and voice also.

[Qi Hu @qihu00]

I have a good idea now of what happened but first want to apologize to @spanky and @RealSpotOdds . I think that it was very unlikely to be their software fault. Last week I was socially engineered into downloading a bad link from a bogus Microsoft Teams call last week from another hacked account that deepfaked a colleague on the video call. I had thought nothing of it at the time as a driver to help with audio not working but now realize that was likely my desktop vulnerability.

[Qi Hu @qihu00]

@thedeutsch96 @RealSpotOdds No I panic wiped my PC once it seemed like that was the vulnerability. Shortly after that I got locked of my telegram and have two unknown devices still on active sessions there that I can't kick off since they are older than mine.

[Qi Hu @qihu00]

I think desktop vulnerability rather than private key leak was the likely culprit. Obviously my responsibility here but one of my traders refused to use/download @RealSpotOdds on their PC since he said it allowed full access to his desktop. I didnt take that seriously, nor did I upgrade the software when they sent this email out 10 days ago. Expensive mistake by me, hope others can learn from my carelessness. Seperate PC when interacting with crypto containing zero extra software!

[Qi Hu @qihu00]

@web3tokenomics @RealSpotOdds Its arguably the best odds screen for serious bettors. I don't want to throw them under the bus at all, if I use them again it will also be on a segregated PC however.

[Qi Hu @qihu00]

@SpecterAnalyst @RealSpotOdds The key still requires Rabby to display it, of which it prompts a local password to do so. Withdrawing from polymarket and sxbet to amln external address with a wallet already logged in only requires a few clicks on the hot wallet.

[Qi Hu @qihu00]

I had two hotwallets drained with seperate private keys that were never leaked digitally. Also my telelgram was compromised as it was logged in on my desktop too. I dont have any other software installed that are not mainstream nor had given these kind of security warnings before. I dont know much about how a backdoor could have been established but for now this feels like the most likely vulnerability.

[Qi Hu @qihu00]

@SpecterAnalyst @RealSpotOdds I dont think my key was ever leaked. My hotwallet was logged in via Rabby and anyone with access to my desktop could have clicked withdraw and then put in an external address.

[Qi Hu @qihu00]

My telegram is now compromised. Dont transact with me at all please.

[Qi Hu @qihu00]

@tracely_ @Polymarket @zachxbt https://t.co/eaSy8unWsJ

[Qi Hu @qihu00]

Just got hacked for 500k on @Polymarket across two accounts. Positions sold, and withdrawn to an external wallet. Any help appreciated @zachxbt or anyone please DM.

[Qi Hu @qihu00]

@Polymarket @zachxbt Yeah I realize its gonna be a flood of random attention, appreciate the heads up. Also my @SX_Bet account drained for 150k also, realize this was likely a vulnerability on my part and some desktop virus got me.

[Qi Hu @qihu00]

@MikeMcDonald89 The grift never stops

[Qi Hu @qihu00]

@ToddWitteles @meidamarek_ There are also some who dont believe 1k-2k NL exists or 500k sports bets exist.

[Qi Hu @qihu00]

@FarazJaka @SavagePoker @PokerTDA @PokerGO Load management has gone too far

[Calvin Anderson @Cal42688]

this is fucking absurd. i don’t understand why people promote chino. he’s owed me 50k for 10 years from when he outright scammed me, and has paid less than half that while he gets massages 8 hours a day. he won PCA and literally tried to scam his backers by attempting to get paid behind their backs and run off with the $. He’s scammed tons of people in a variety of ways and pays everyone the stone minimum he can, and the only way to have a chance to get paid back by him is keeping him in action. "good people" what a joke

[Qi Hu @qihu00]

@dpeterspoker17 Can we normalize paying interest in a spot like this? Pretty unfair for Dylan to spend emotional energy on this, lose time value of $, and have it made "right", which I assume you'll be diligent enough to do.

[Qi Hu @qihu00]

@BackyarddBrett @FiddlesPicks Maybe, just maybe...betting legitimacy isnt based on your number of followers & likes.

[Qi Hu @qihu00]

@BigHuni @HawkCallum You spammed high stakes chats and all but hard vouched for the site and was responsible for 5M+ in bad debt. I wouldn't have deposited if not for your "reputation". Anytime you open your mouth publicly it comes with the territory to get shit on.