Obviously this couldn’t be a regular coincidence and obviously this can’t be applied by one certain user. In general all of this only make sense if one or few competing pools decided to eliminate 50BTC for whatever reason. We are exploring all available data to figure out if some users was not real users but the proxied shares from the evilpool.
When miner formally connects to the evilpool it actually goes to the 50BTC through a proxy to get a job, and after that evilpool proxies all shares except of winning ones back to 50BTC. This could cause total bad luck that we’ve faced in a last few weeks.