Post

The "Trump Accounts" investment app is a security nightmare. The "LegacyVault" shared with investment app RobinHood, is encrypted with the static passphase: "hNnS24Qi3b3n8n2owu12EYxrp2ckMvrXL4TVwPzf". The QR Contribute links also use a static secret: 8YaZnHrYM3NjLmGAmx6H1wr

TitleOS (They/Them) 🏳️‍🌈

@titleos.dev

The Singular SDK secret is also shared between Robinhood and this (scam) app: "key: robinhood_acd79726 secret: 2dfd9e2bcb8721e931ed33fd786edffe"

21/10/26, 8:18 pm0 reposts0 likes

TitleOS (They/Them) 🏳️‍🌈

@titleos.dev

The app also queries all the apps you have installed via a wildcard upon install.