{"author":{"username":"10xchris","displayName":"10X Chris","fid":1129138},"timestamp":"2026-10-17T15:15:56.000Z","text":"Ai continued:\n\n> My assessment of the prize\nThe competition itself is not necessarily malicious. It may be encouraging developers to demonstrate complete self-custodial account management.\n\nHowever, the wording encourages a potentially unsafe pattern, particularly if winners publish tutorials that normalise pasting seed phrases into unfamiliar applications.\n\nI would recommend:\n1. Never enter your primary Farcaster seed phrase into a competition demo, unfamiliar website or downloaded script.\n\n2. For testing, use a newly generated, disposable account with no valuable assets.\n\n3. For production clients, require wallet-based signing and delegated app keys, preferably with limited permissions and expiration.\n\n4. Review what you're signing, even when a client doesn't request your seed phrase.\n\nP.s: Why encourage seed phrase imports when the protocol already supports delegated signer authorisation without exposing the custody secret?\n\nCC @topocount.eth \n\nhttps://github.com/farcasterxyz/protocol/discussions/266","links":[{"url":"https://github.com/farcasterxyz/protocol/discussions/266","title":"FIP: Snapchain Signers · farcasterxyz/protocol · Discussion #266"}],"farcaster":"https://farcaster.xyz/10xchris/0x61b8d216ac71498f1423211aa90985d9b8592bb1","firefly":"https://firefly.social/post/farcaster/0x61b8d216ac71498f1423211aa90985d9b8592bb1"}