He seems to have used MetaMask! He was not writing any code or “tunneling into their servers”!
Unless MetaMask is not recomended anymore and I should use centralized websites that I have no idea what code they are running?
Even my bank that has a REST API would probably tell me where the money went, instead of “it’s gone”.
