Serious security and trust concerns
Serious security and trust concerns – user data exposure and suspicious activity
I am writing this review because of serious issues I discovered while using Kikabet.
I found a security problem where confidential user information appeared to be exposed, including sensitive account data such as names, phone numbers, addresses, and KYC-related information. I have evidence showing this information was accessible, and my concern is that this issue has not been properly resolved.
I also found suspicious activity related to the public "All Bets" section. Some displayed bets appeared questionable and did not match what I expected from a transparent betting platform. I have evidence documenting my findings.
Instead of seeing a responsible response focused on protecting users and fixing security problems, my experience has left me seriously concerned about how user data and platform transparency are being handled.
I recommend that anyone using this platform carefully considers these issues and that Kikabet provides a clear explanation, investigates the data exposure, and proves that user information is secure.
Response after Kikabet reply ::
Kikabet's response contains several statements that are misleading and omit important context.
First, the claim that I received 1,150 USDT in relation to this matter is false. 1,000 USDT was my legitimate tournament prize from the 100k race, which I won according to the tournament rules. It was not a payment related to the security issues I reported. The only payment connected to my vulnerability report was 150 USDT.
Second, I have never claimed that the tournament prize was a bug bounty payment. I have complete evidence showing the purpose of every payment, including emails, chat logs, blockchain transactions, and videos.
After the initial issue was patched, I discovered another API vulnerability around two weeks later that exposed sensitive user information, including KYC-related data, email addresses, phone numbers, and other personal information. I reported this through email and can provide the original API responses and video evidence to any legitimate authority or investigator.
Despite reporting the issue responsibly, I received no response for over two weeks. When I followed up and asked when it would be fixed, my access to live support was suspended instead of receiving an update.
I stand by my review and am prepared to provide my evidence to Trustpilot or any appropriate authority upon request. My goal is for the security issues to be properly investigated and for affected users' data to be protected.
5 sierpnia 2026
Opinia niezależna