Scam With Security Researcher Luis Carchi Scammer Of GetShield.xyz

<p> </p><p>A security vulnerability report should end with acknowledgment, communication, and fair handling. Unfortunately, my experience with GetShield.xyz has been the opposite.</p><p>I am publishing this post to document my experience after responsibly reporting a vulnerability that was reviewed and acknowledged by the company.</p><h2>Company Information</h2><p>The company publicly identifies itself as GetShield and operates through GetShield.xyz.</p><p>Relevant public profiles:</p><ul><li><p>Company Website: <a data-saferedirecturl="https://www.google.com/url?q=https://getshield.xyz&source=gmail&ust=1780432773853000&usg=AOvVaw0mbXVKeN5-HjJOJ3FneFZ8" href="https://getshield.xyz" target="_blank">https://getshield.xyz</a></p></li></ul><div> According to public company information, Luis Carchi is listed as the CTO and Co-Founder of Shield. </div><ul><li><p>Luis Carchi Personal Website: <a data-saferedirecturl="https://www.google.com/url?q=https://www.luiscarchi.com&source=gmail&ust=1780432773853000&usg=AOvVaw2oP8dUah0ocaytg8Qr97JE" href="https://www.luiscarchi.com" target="_blank">https://www.luiscarchi.com</a></p></li><li><p>Luis Carchi LinkedIn: <a data-saferedirecturl="https://www.google.com/url?q=https://www.linkedin.com/in/carchi-luis/&source=gmail&ust=1780432773853000&usg=AOvVaw22vn1JXfzM5NwcVFXyOWaR" href="https://www.linkedin.com/in/carchi-luis/" target="_blank">https://www.linkedin.com/in/<wbr></wbr>carchi-luis/</a></p><p> </p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi43tbl57dwQUruGN8JYij1VdhYInzh7oZFH8eI61adtOyFtmKzTmKVto7mOaLwFj_iaEzz4iPq3biXH1Ofa3RyE8Af6oMcA13FGe6-DUvR2MH3NLPfqiojByR8EEuR_hVcdeOiKRLyfqGzUd7ZVm_i4-V-6DGEV6p5VpkE5IrmvR6pFW6MH1VxisfBtpk/s224/images.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="224" data-original-width="224" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi43tbl57dwQUruGN8JYij1VdhYInzh7oZFH8eI61adtOyFtmKzTmKVto7mOaLwFj_iaEzz4iPq3biXH1Ofa3RyE8Af6oMcA13FGe6-DUvR2MH3NLPfqiojByR8EEuR_hVcdeOiKRLyfqGzUd7ZVm_i4-V-6DGEV6p5VpkE5IrmvR6pFW6MH1VxisfBtpk/w312-h312/images.jpg" width="312" /></a></div><br /> <p></p><p> </p><p></p><div class="separator" style="clear: both; text-align: center;"><iframe allowfullscreen="allowfullscreen" class="b-hbp-video b-uploaded" frameborder="0" height="566" id="BLOGGER-video-3fea2d0904063730-1415" mozallowfullscreen="mozallowfullscreen" src="https://www.blogger.com/video.g?token=AD6v5dyqDeVcaJo4RmmUImG__Vtaxn7FNy0lpKM633Tzh8yy4vaF9MxS03ApZ7T80jplpGaRMIpqoYa3tHrAsLieSTX6IK40A5CPu3z5bamcEWPed7duw05_Vm6nJX9yPC2uxyCynv4&origin=ashishpathaksec.blogspot.com" webkitallowfullscreen="webkitallowfullscreen" width="680"></iframe></div><br /> <p></p></li></ul><h2>Vulnerability Disclosure</h2><p>I discovered and responsibly reported a security issue affecting the platform.</p><p>After reviewing the report, the issue was acknowledged and I was informed that a reward of 100 USDT would be provided for the finding from luis.</p><p>Following their instructions, I submitted my wallet address for payment.</p><h2>What Happened Next</h2><p>After providing the payment address:</p><ul><li><p>Communication became extremely limited.</p></li><li><p>Multiple follow-up emails were sent.</p></li><li><p>More than 10 days passed without payment.</p></li><li><p>No clear explanation was provided regarding the delay.</p></li><li><p>Warning emails requesting clarification were ignored.</p></li></ul><p>At the time of writing this post, I have not received the promised 100 USDT reward.</p><h2>Why This Matters</h2><p>Security researchers spend time identifying vulnerabilities and reporting them privately so organizations can fix issues before they are abused.</p><p>When companies acknowledge reports and discuss rewards, researchers expect transparent communication regarding payment status and timelines.</p><p><b>The facts are:</b></p><ul><li><p>A vulnerability was reported.</p></li><li><p>The report was acknowledged.</p></li><li><p>A reward of 100 USDT was discussed.</p></li><li><p>My payment address was provided.</p></li><li><p>More than 10 days have passed.</p></li><li><p>Repeated follow-up emails have not resulted in payment or a meaningful response.</p></li></ul><p>Readers can form their own conclusions based on this timeline.</p><h2>Request For Resolution</h2><p>I would still prefer to resolve this matter privately and professionally.</p><p>Luis Carchi responds, provides clarification, or completes the promised payment, I will update this post to reflect that outcome.</p><p>Transparency and communication benefit both security researchers and the companies they help protect.</p>

Scam With Security Researcher Luis Carchi Scammer Of GetShield.xyz

  A security vulnerability report should end with acknowledgment, communication, and fair handling. Unfortunately, my experience with GetS...

Read more »