This is a bit of a strange update because it's more relevant to @steemitblog and @steemcurator01 than the wider community - but definitely important to anybody responsible for selecting posts for booming or steemcurator support.
It was questionable as to whether or not this post should be made via @endingplagiarism due to the nature in which this problem was reported to me but it's also a crucial coding update so I've chosen this account instead.
As with all new initiatives, there are "gaps" in the system which people endeavour to exploit. There are a few tools available to review club status including starlord's tool and steemworld.org. Neither of which pick up on this particular "scam" and until this morning, my new front-end didn't either.
Looking at the user that was highlighted to me, he's recently powered down approximately 16,000 STEEM to the exchanges but other than the power down, there's no trace of the funds. They've apparently completely disappeared.
I found this strange, they're clearly not in his wallet but none of the tools available indicate a withdrawal. This is what my interface displayed...
Some transfers out to exchanges but not the 16,000 in question.
It's worth noting at this point, that the user in question is a developer.
So, I looked at his account history, via @steemchiller's account_history API and found this:
0 => string 'fill_vesting_withdraw' (length=21)
A few of them in fact. As I commented to the person who'd seen the power down, "cheeky bastard".
So I fixed the loophole...
And here's the account that the funds were transferred to...
I strongly recommend that my website is used for checking club status so that people like this don't appear to be in #club5050 when it's now very clear that they're not.