@whop STOLE $1,000,000 FROM MY BUSINESS
@whop let hacker drain our entire client base FOR $374,526 and launder it into crypto in under 2 minutes.
A hijacked browser session was all it took. No login. No password. No 2FA prompt. Nothing.
In 120 seconds the attacker spun up 2 API keys, ATTEMPTED TO CHARGE $1.2M
attackers Successfully charged $384,155 across every client card on file, transferred it to other Whop accounts, and cashed out to crypto.
Hundreds of charges in 2 minutes.
- Zero velocity checks
- Zero withdrawal holds
- Zero alerts
Because Whop has none of them.
ANYONE USING Whop
switch to
@FanBasisInc a payment platform with actual cyber security.