Forging the government’s lottery: China’s civic apps run on a shared reward backend with no real secret

Dozens of Chinese city, civic and state-media apps run their points-and-lottery campaigns on a handful of shared B2B SaaS backends. The signing that protects them uses a public salt and a key the server hands you on request. Here's the multi-tenant exposure — and why it's the more important story than any one app.