星球日报|Sep 28, 2026 06:58
[Loss of approximately $340,000, @shuangfei8 claims MEXC account was hacked and assets were withdrawn]
Odaily Planet Daily reports that @shuangfei8 claims their MEXC account was hacked, resulting in a loss of approximately $340,000. In the early hours of September 25, the attacker forged identification documents to apply for a reset of security settings, including changing the linked email address and unbinding Google authentication, which was approved within 10 minutes. The attacker subsequently controlled the account for approximately 7.5 hours, during which they reset the password, linked Google authentication, and created an API. After MEXC's review identified risks, the account was frozen, and the email was reverted to the original email address, but the API was not revoked.
After @shuangfei8 followed instructions to change the password and re-link Google authentication, the account was subjected to a 24-hour withdrawal restriction. Between 04:12 and 04:25 (Beijing time) on September 27, approximately 27 minutes after the restriction was lifted, the account was used to withdraw 322,110 USDT and 9,134,000 ONE, totaling approximately $340,000. During the withdrawal period, there were no new login records.
@shuangfei8 stated that MEXC's Help Center specifies that APIs associated with frozen accounts should become invalid, but this did not occur in practice. Withdrawals via API do not require Google authentication or email verification. They have formally filed a claim with MEXC and attempted to report the incident to the police, requesting the platform to preserve logs, provide written answers to related questions, and return the assets. They also reminded other users to check the API management page for any abnormal keys.
MEXC's official response stated that a preliminary investigation has been completed and an appropriate solution has been provided. Further communication will be conducted one-on-one via email, and updates on the handling progress and required information will be shared. Users are advised to monitor their registered email and official channel communications.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink