Good catch! They didn't quite look right. I was able to make them look a little better by tweaking the sizes by a few pixels. They still don't look perfect, but it seems this may just be a trade-off to using an image instead of an HTML table.
They're a lot better now, but still a few dots aren't square.
The QR code is 145x145 pixels.
It has a 12 pixel white border around it.
The data area is 121x121 pixels.
There are 41x41 dots, so almost all dots are 3x3, but two rows and two columns are only 2 pixels tall/wide.
Make the whole image 2 pixels wider and taller and it should look good, since 123 is a multiple of 41.
Thanks for the deep analysis! I've corrected the size to match this formula. It does look much better.
Do I have to type the leading zeroes?
And, yes, you do have to type in the leading zeros.
I just withdrew using a 5 digit OTP "96786", so if you thought you were checking for leading zeroes... you're not.
I stand corrected. I guess it doesn't really make a difference in terms of brute-forcing anyway, but the leading zeros are indeed optional.