A long-term Bitcoin holder had all assets in the account withdrawn less than 12 hours after transferring BTC to a large Australian exchange, according to a post by Bitcoin News on X. According to Odaily, a friend said hackers had accessed the holder’s Google account for about three months, obtained email access and Google Authenticator credentials from cloud backups, and then waited for BTC to be deposited to the exchange.

The post said the exchange identified the hacker as the account holder and approved the withdrawal. The holder received a withdrawal approval notice at 3 a.m. The post also advised users to disable Google Authenticator cloud backups and use hardware security keys such as YubiKey, with two keys set up so one can serve as a backup if the other is lost.