And probably just used a script for that.
It's enough to copy the final submit HTTP call and replace it with your username, your public active key and a signature that can easily be created programmatically by signing the "2 words" login message the website gives you.
Gotta make it safer if you're distributing free money on the internet.. 🙈🙈🙈
NOTE: pretty sure that it stopped giving rewards only because it was drained of all the liquid HIVE in the account.