(i may have missed/forgotten some details about this, feel free to add)
They threatened users who they suspected of foul play and also charged some credit cards without authorization.
This clusterfuck of issuing "codes" without proper transactional/double-entry/whatchamacallit accounting was such an obvious display of utter incompetence that repeated itself over and over throughout GAW's history. With every time this happened the consequences were more and more serious and required more and more lies to cover up. It's one thing when you fail to ship a Gridseed miner on time, it's quite different when you fail implement hyper-flux-$20-mega-CAF. Aaaahhh old times...