Security· ★★★· bearish·

MEXC Confirms $340K Loss via API Key, Fully Compensates User

  • —User lost 322,110 USDT and 9,133,999 ONE in 13 minutes on September 26
  • —Withdrawals began 27 minutes after a 24-hour security hold expired
  • —The API key was created by the attacker and never revoked during account restoration
  • —MEXC fully compensated the user and continues its investigation
Why it matters: The incident shows that exchange account-recovery procedures can leave attackers' access active, posing a risk to all users.
#USDT#ONE
Source: The Crypto Times
More on this
Security · yesterday
MEXC user loses $340K after account recovery leaves attacker's API key active
 Security · Sep 18
DeBot confirms APT attack on wallets: no losses, but private keys at risk
 Security · Sep 24
DriveWealth Confirms Breach Exposing Revolut and Fintech Users' Data