It looks like someone has figured out how to empty the card, in 2 minutes: https://twitter.com/#!/jonathanscard/status/1003474991889776...
Regardless, I'm glad we tried it; anyone have any theories of how it's being hacked?
Edit: I just checked with an online barcode reader and this isnt the case. It resolves to 6061006913522430