They should have used unique wallets for each tweet and A/B tested the gullibility of the victim's audience.

Would have made them more difficult to track and shut down as well. More hallmarks that this wasn't probably something they lucked into, rather than some sophisticated attack.

exploits like this tend to get patched very fast no time for a/b testing. every second counts.

At the very least it would have provided some interesting post-game analysis.

Someone posted in the main thread that twitter was releasing a new API tommorow. It was definitely getting patched soon.