Have you considered your PostingKey?
Have you changed your PostingKey after receiving your POCKETS?
I just got aware of the fact that i stored my PostingKey in many 3rd Party Applications.
At least i'm handling my posting Key very careless.
Aaaaand the PostingKey is Key to POCKET, right?
uhmmmm ^^ sooo whatever/whoever is able to post in my name a pocketsend command can take my experimental Token to another Account.
hmmmmmm, so i guess all fine :-)
|Have a great day|
and don't hesitate to send some Bits&Bytes of this experiment by comment: