the fact that you created an "admin" account and searched for a hypothetical admin page.
Bad intent. pure and simple. Inbox was fucking around and got caught. Keep his coins and pay them to the first dev who make something nice related to improving this situation.
Inbox should not have engaged in all that activity which clearly shows his intent was corrupt. Simple.
I try to register Admin accounts on many services as a novelty thing. Nothing to do with bad intent. In fact I was one of the top sellers on bitmit with the same username.
I don't agree that trying admin.php is considered as ill intended. I was tired and I was panicking because the exchange was telling me my 262msc transaction was invalid when it was valid. I didnt try to map out hidden pages or anything of that nature. I was actively trying to get bug fixed so they would credit my account. Just bumming around on their site. I never accessed the backend or anything of this nature.
I have no problem handing out my id. I am just curious how this would help the situation. There are a few people on this forum that know my identity and can verify including John the escrow agent who I've dealt with multiple times.