Yeah, sorry about the naked hex keys, it was vibe coded during lunch break and bech conversion was getting some problems. I thought about making it more universal, but the rules for bounties are quite diverse (zapping back reposts or just author, deadlines, zaps sent before the actual repost for some other reason and so on). Creating one tool to fit them all without an audience that would actually need/request that is not that fun, so hence the one-shot tool.
So the other day, nostr:npub1zfs0all2dz43da3gh5ghm53jjaufkqlyvsxydpz73r00hzd2hdaqt3vd2n promised 10k sat zaps to all that boost his job offer:
Understandably the post got swarmed by legit and not so legit accounts and several of my follows did boost.
nostr:npub1vl38mdazffm0u644zj9lqt00lthuqwvnclqdxzvu0y2cvw4s539s3a5l7q even coded a tool to help them find the relevant accounts:
http://bounty-hunter.solajpafistoj.net/
but to this day, only a small selection of users did receive zaps as detected by that tool:
And here are some that did not get zapped:
Of course, nostr is not consistent, so late entrants could always fake the time and claim the bounty. Just be careful to not boost before the OP 🤯.
The tool appears to generate naked hex pub keys, not npubs but I don't see much motivation from nostr:npub1zfs0all2dz43da3gh5ghm53jjaufkqlyvsxydpz73r00hzd2hdaqt3vd2n to resolve these issues.
Is nostr:npub1zfs0all2dz43da3gh5ghm53jjaufkqlyvsxydpz73r00hzd2hdaqt3vd2n scamming us? I don't think so but apparently Sybils got zapped while high profile accounts did not get zapped. I guess fulfilling the promise just went over their head, where they had the honest intention to pay up.
We need better tools and a more robust concept of WoT cause Sybil attacks will only get worse.
Discussion
No need to say sorry. You did a great job trying to help!
I regret having participated in a different boost campaign that did hide the fact that boosts were paid for and I'm not 100% convinced that paid boosting is a good thing but at least with the transparency nostr:npub1zfs0all2dz43da3gh5ghm53jjaufkqlyvsxydpz73r00hzd2hdaqt3vd2n intended to provide it wouldn't be deceptive, so maybe we can build that missing tooling to strike a good balance between spam and helping spread the word.
To be fair, it would probably be smart to fetch each of the profile inbox relays and check for zap events there instead of just the default of a few popular relays and option to add more.
Still, I do not think it would show everything as rewarded.