Post

The "Trump Accounts" investment app is a security nightmare. The "LegacyVault" shared with investment app RobinHood, is encrypted with the static passphase: "hNnS24Qi3b3n8n2owu12EYxrp2ckMvrXL4TVwPzf". The QR Contribute links also use a static secret: 8YaZnHrYM3NjLmGAmx6H1wr

The Singular SDK secret is also shared between Robinhood and this (scam) app: "key: robinhood_acd79726 secret: 2dfd9e2bcb8721e931ed33fd786edffe"