#gate
gate
187,510 views
191 Discussing
Hot
Latest
Gate responds to the incident of assets being stolen: preliminary assessment suggests it is an individual case
According to Gate’s official statement, the affected user reset security settings for phone and email on July 4 using a new device and completed the necessary verification; on July 5, they requested to unbind the phone. After passing a second verification via facial recognition and historical transaction records, on July 6, they reset the Google verification code and password, and the entire process was verified successfully.
The key疑 point emerged on July 7—the attacker logged in using the old password on an old device and made multiple withdrawals to a new address. The user only discovered the abnormality and reported it on July 8.
Gate stated that the website is operating normally and there is no systemic security vulnerability. The preliminary judgment is that it is related to information leakage on the user side. Details will be disclosed after the investigation is completed.
A few things worth staying alert to:
· Resetting security settings on a new device + unbinding the phone + changing the password is a typical three-step account takeover sequence
· Old passwords still work on the old device, suggesting local credentials or cookies may have been stolen
· From the re-binding/unbinding to the withdrawals was several days—no interception was triggered during the risk-control silent period
Self-check recommendations: regularly change passwords, enable withdrawal whitelisting and delayed settlement, check authorized devices and API keys, and be wary of phishing links and clipboard malware. No matter how safe the exchange is, the final line of defense for private keys and account security always remains in your own hands.
#Gate #交易所安全 #资产被盗
According to Gate’s official statement, the affected user reset security settings for phone and email on July 4 using a new device and completed the necessary verification; on July 5, they requested to unbind the phone. After passing a second verification via facial recognition and historical transaction records, on July 6, they reset the Google verification code and password, and the entire process was verified successfully.
The key疑 point emerged on July 7—the attacker logged in using the old password on an old device and made multiple withdrawals to a new address. The user only discovered the abnormality and reported it on July 8.
Gate stated that the website is operating normally and there is no systemic security vulnerability. The preliminary judgment is that it is related to information leakage on the user side. Details will be disclosed after the investigation is completed.
A few things worth staying alert to:
· Resetting security settings on a new device + unbinding the phone + changing the password is a typical three-step account takeover sequence
· Old passwords still work on the old device, suggesting local credentials or cookies may have been stolen
· From the re-binding/unbinding to the withdrawals was several days—no interception was triggered during the risk-control silent period
Self-check recommendations: regularly change passwords, enable withdrawal whitelisting and delayed settlement, check authorized devices and API keys, and be wary of phishing links and clipboard malware. No matter how safe the exchange is, the final line of defense for private keys and account security always remains in your own hands.
#Gate #交易所安全 #资产被盗
Gate Responds to the Asset Theft Incident: Preliminary Assessment Finds It a Single Case, Not a Systemic Vulnerability
After reading Gate’s disclosed timeline, to be honest, it’s more alarming than a simple “theft.”
Key points in the timeline:
· 7/4 The user resets the phone and email on a new device; verification passes
· 7/5 Unbinds the phone; after passing face verification + a second confirmation using historical transaction records
· 7/6 Resets the Google Authenticator and password; verification passes throughout
· 7/7 Logs in on the old device using the old password, withdrawing in batches to a new address
· 7/8 The user only reports the theft
Gate’s initial assessment is that this is an individual case. The website is operating normally, and they believe the likelihood is that sensitive information was leaked on the user side; details will be disclosed after further investigation.
My perspective: in this process, every layer of platform risk control is triggered—face verification, historical transactions, and a second verification step, none are missed. The issue seems to lie at the source instead—devices, passwords, and email may already have been simultaneously controlled. The attacker appears to have gone through the process “with a complete identity.”
Three reminders for yourself:
1. Use an independently secured, strong password for your email + 2FA—it's the master key to all your accounts
2. Regularly back up and review your bound devices for the Google Authenticator; don’t let “resetting on a new device” become a blind spot
3. Store large-value assets in layers; keep on exchanges only the portion used for trading
Before Gate formally discloses the details, don’t jump to conclusions—just audit the security settings on your own account. You can only benefit from doing so.
#Gate #账户安全 #加密安全
After reading Gate’s disclosed timeline, to be honest, it’s more alarming than a simple “theft.”
Key points in the timeline:
· 7/4 The user resets the phone and email on a new device; verification passes
· 7/5 Unbinds the phone; after passing face verification + a second confirmation using historical transaction records
· 7/6 Resets the Google Authenticator and password; verification passes throughout
· 7/7 Logs in on the old device using the old password, withdrawing in batches to a new address
· 7/8 The user only reports the theft
Gate’s initial assessment is that this is an individual case. The website is operating normally, and they believe the likelihood is that sensitive information was leaked on the user side; details will be disclosed after further investigation.
My perspective: in this process, every layer of platform risk control is triggered—face verification, historical transactions, and a second verification step, none are missed. The issue seems to lie at the source instead—devices, passwords, and email may already have been simultaneously controlled. The attacker appears to have gone through the process “with a complete identity.”
Three reminders for yourself:
1. Use an independently secured, strong password for your email + 2FA—it's the master key to all your accounts
2. Regularly back up and review your bound devices for the Google Authenticator; don’t let “resetting on a new device” become a blind spot
3. Store large-value assets in layers; keep on exchanges only the portion used for trading
Before Gate formally discloses the details, don’t jump to conclusions—just audit the security settings on your own account. You can only benefit from doing so.
#Gate #账户安全 #加密安全
Gate Responds to User Asset Theft Incident: Preliminary Assessment Says It’s an Isolated Case, Not a System Vulnerability
The platform has launched an emergency investigation. The timeline provided is worth reviewing step by step 👇
• 7/4 New device request to reset phone + email; verified
• 7/5 Unlinked phone; face verification + historical transaction records confirmed again
• 7/6 Reset Google verification code and password
• 7/7 Old device logged in using the old password, multiple withdrawals sent to a new address
• 7/8 The user noticed the anomaly and reported it
Gate’s initial assessment suggests it may be related to user information leakage. The website is operating normally; details will be disclosed after the investigation is completed.
What really hurts is this—after changing the bindings and emptying the account, the attacker took a full 3 days. During that time, every security reminder email sent by the platform was ignored by the user.
A few self-check actions—recommended to do tonight:
1⃣ Enable email two-factor authentication; read any security-change emails immediately
2⃣ Turn on withdrawal address whitelisting; enforce a 24h cooling-off period for new addresses
3⃣ Do not store API Keys, the Google Authenticator, and passwords on the same device
4⃣ Regularly clear old device login records
What an exchange can do is risk control. What can save your account is only your own verification habits.
#Gate #账户安全 #资产被盗
The platform has launched an emergency investigation. The timeline provided is worth reviewing step by step 👇
• 7/4 New device request to reset phone + email; verified
• 7/5 Unlinked phone; face verification + historical transaction records confirmed again
• 7/6 Reset Google verification code and password
• 7/7 Old device logged in using the old password, multiple withdrawals sent to a new address
• 7/8 The user noticed the anomaly and reported it
Gate’s initial assessment suggests it may be related to user information leakage. The website is operating normally; details will be disclosed after the investigation is completed.
What really hurts is this—after changing the bindings and emptying the account, the attacker took a full 3 days. During that time, every security reminder email sent by the platform was ignored by the user.
A few self-check actions—recommended to do tonight:
1⃣ Enable email two-factor authentication; read any security-change emails immediately
2⃣ Turn on withdrawal address whitelisting; enforce a 24h cooling-off period for new addresses
3⃣ Do not store API Keys, the Google Authenticator, and passwords on the same device
4⃣ Regularly clear old device login records
What an exchange can do is risk control. What can save your account is only your own verification habits.
#Gate #账户安全 #资产被盗
I looked closely at Gate’s official timeline, and the more I read, the more it looks like a "slow-knife" social engineering attack, rather than the platform being breached.
Revisiting a few key points:
· 7/4 A new device initiated a reset of the phone + email; verification passed
· 7/5 Unbound the phone; face + historical transaction records were re-verified a second time
· 7/6 Reset the Google Authenticator and password; the whole process was checked
· 7/7 The attacker logged in using "old device + old password" and withdrew in batches to a new address
· 7/8 Only then did the user notice the abnormality and report it to customer service
Gate says its preliminary assessment is that this is an isolated case, with no evidence of a system vulnerability. It may be related to user information leakage, pending further investigation and details.
My observations are threefold:
1. From the re-linking to the withdrawals, there was a three-day gap—most likely the attacker had complete identity information (documents, historical orders, even face materials), allowing them to bypass risk controls all the way;
2. "Old device + old password" could directly place orders and initiate withdrawals, suggesting that while device fingerprinting and address whitelisting mechanisms work, there is still room for optimization in extreme scenarios;
3. What ordinary users can do is actually quite simple—withdrawal address whitelisting + time-lock/lock-up, a separate email account, switch off SMS 2FA and use a hardware key instead, and don’t leave the front/back of your ID card and selfies in chat logs.
No matter how the final assessment is made, this incident is a reminder: for CEX security, half of the boundary is on the platform, and half is in your own hands.
#Gate #交易所安全 #Self-custody
Revisiting a few key points:
· 7/4 A new device initiated a reset of the phone + email; verification passed
· 7/5 Unbound the phone; face + historical transaction records were re-verified a second time
· 7/6 Reset the Google Authenticator and password; the whole process was checked
· 7/7 The attacker logged in using "old device + old password" and withdrew in batches to a new address
· 7/8 Only then did the user notice the abnormality and report it to customer service
Gate says its preliminary assessment is that this is an isolated case, with no evidence of a system vulnerability. It may be related to user information leakage, pending further investigation and details.
My observations are threefold:
1. From the re-linking to the withdrawals, there was a three-day gap—most likely the attacker had complete identity information (documents, historical orders, even face materials), allowing them to bypass risk controls all the way;
2. "Old device + old password" could directly place orders and initiate withdrawals, suggesting that while device fingerprinting and address whitelisting mechanisms work, there is still room for optimization in extreme scenarios;
3. What ordinary users can do is actually quite simple—withdrawal address whitelisting + time-lock/lock-up, a separate email account, switch off SMS 2FA and use a hardware key instead, and don’t leave the front/back of your ID card and selfies in chat logs.
No matter how the final assessment is made, this incident is a reminder: for CEX security, half of the boundary is on the platform, and half is in your own hands.
#Gate #交易所安全 #Self-custody
Gate responds to user asset theft: preliminary finding that it’s an isolated case, not a systemic vulnerability
The timeline reconstruction is fairly complete:
· 7/4 The user reset the phone and email security settings on a new device and passed verification
· 7/5 Unlinked the phone; face recognition + historical transaction records were confirmed again
· 7/6 Reset Google Authenticator codes and the password; all operations passed verification
· 7/7 15:00-16:00, the old device logged in with the old password and multiple withdrawals were made to a new address
· 7/8 The user reported the theft
Official statement: The platform is operating normally and there is no system security vulnerability. It is likely related to information leakage on the user side; details will be disclosed once the investigation is complete.
My personal view: Across the whole chain, the combination of changing security settings on the new device + using the old password on the old device to withdraw funds is quite striking. Since the face recognition and historical transactions could be passed, it seems more like the account information was systematically obtained, rather than a simple credential-stuffing attempt.
A reminder to everyone:
1. Large-amount assets shouldn’t rely only on an exchange’s risk controls—hardware wallets should still be used
2. Be sure to back up your Google Authenticator, and keep it separate from your email/phone on different devices
3. Don’t casually dismiss alerts about logging in from an unknown device or changing bindings—those few seconds might be everything you have
Wait for Gate’s final disclosure and see whether they can provide a clearer description of the attack path.
#Gate #交易所安全 #资产被盗
The timeline reconstruction is fairly complete:
· 7/4 The user reset the phone and email security settings on a new device and passed verification
· 7/5 Unlinked the phone; face recognition + historical transaction records were confirmed again
· 7/6 Reset Google Authenticator codes and the password; all operations passed verification
· 7/7 15:00-16:00, the old device logged in with the old password and multiple withdrawals were made to a new address
· 7/8 The user reported the theft
Official statement: The platform is operating normally and there is no system security vulnerability. It is likely related to information leakage on the user side; details will be disclosed once the investigation is complete.
My personal view: Across the whole chain, the combination of changing security settings on the new device + using the old password on the old device to withdraw funds is quite striking. Since the face recognition and historical transactions could be passed, it seems more like the account information was systematically obtained, rather than a simple credential-stuffing attempt.
A reminder to everyone:
1. Large-amount assets shouldn’t rely only on an exchange’s risk controls—hardware wallets should still be used
2. Be sure to back up your Google Authenticator, and keep it separate from your email/phone on different devices
3. Don’t casually dismiss alerts about logging in from an unknown device or changing bindings—those few seconds might be everything you have
Wait for Gate’s final disclosure and see whether they can provide a clearer description of the attack path.
#Gate #交易所安全 #资产被盗
Ever since the last $RAVE incident, #Gate and #KUCOIN have turned into major slaughterhouses, where all the retail traders and aggressive gamblers have been sent to be liquidated like in a scam fest in Northern Myanmar.
Right now, no altcoin is spared; they’re all getting harvested on these two major exchanges. Just an hour ago, an address linked to the $LAB project topped up the #GATE deposit wallet with over 100k worth of #LAB tokens. Is this prepping for a midnight dump?
For those night owls, keep an eye on this over the next couple of days; you might snag a fat profit.
Portal:
https://arkm.com/explorer/token/lab
Right now, no altcoin is spared; they’re all getting harvested on these two major exchanges. Just an hour ago, an address linked to the $LAB project topped up the #GATE deposit wallet with over 100k worth of #LAB tokens. Is this prepping for a midnight dump?
For those night owls, keep an eye on this over the next couple of days; you might snag a fat profit.
Portal:
https://arkm.com/explorer/token/lab
📰 Crypto Market Hotspot Dispatch
1. Rising activity in Binance futures trading stirs competition signals while the market remains cautious
Latest data shows Binance futures trading volume has risen to about $1.63 trillion, reaching a new intra-year high. Although overall market sentiment remains cautious and seasonal factors typically suppress trading activity, funds are still continuously opening positions, adjusting portfolios, and managing risk—indicating that the level of hedging and speculation in the derivatives market has not cooled down. For investors, this reflects a growing split in the current market outlook, and short-term volatility and leverage-related risks are worth continued attention.
2. U.S. regulators discuss portfolio margin rules; derivatives market watches policy direction
Recently, the U.S. Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) have initiated a public comment process to discuss a proposal on portfolio margin requirements for securities, security-based swaps, futures, and related products. This development suggests regulators are continuing to refine a cross-market derivatives risk management framework. If the rules progress, they may affect margin efficiency for trading institutions, compliance boundaries for products, and market liquidity expectations—so the industry should keep a close watch.
3. Gate responds to an incident of customer funds loss; tracking, reporting, and coordination advance in parallel
Gate disclosed the latest progress regarding an incident in which customer funds were lost. It acknowledged that earlier communication and handling were insufficient and stated that a dedicated task force comprising security, compliance, legal, and business teams has been established to continue monitoring. Currently, the platform is assisting customers in completing document collection, conducting device security analysis, tracking fund flows, and following reporting procedures. It is also contacting Tether and relevant exchanges to seek interception and freezing of the affected funds. The incident’s next steps will still depend on police investigation and the efficiency of judicial cooperation. The platform has committed to continue investing resources to support rights protection.
#crypto #Binance #Gate
1. Rising activity in Binance futures trading stirs competition signals while the market remains cautious
Latest data shows Binance futures trading volume has risen to about $1.63 trillion, reaching a new intra-year high. Although overall market sentiment remains cautious and seasonal factors typically suppress trading activity, funds are still continuously opening positions, adjusting portfolios, and managing risk—indicating that the level of hedging and speculation in the derivatives market has not cooled down. For investors, this reflects a growing split in the current market outlook, and short-term volatility and leverage-related risks are worth continued attention.
2. U.S. regulators discuss portfolio margin rules; derivatives market watches policy direction
Recently, the U.S. Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) have initiated a public comment process to discuss a proposal on portfolio margin requirements for securities, security-based swaps, futures, and related products. This development suggests regulators are continuing to refine a cross-market derivatives risk management framework. If the rules progress, they may affect margin efficiency for trading institutions, compliance boundaries for products, and market liquidity expectations—so the industry should keep a close watch.
3. Gate responds to an incident of customer funds loss; tracking, reporting, and coordination advance in parallel
Gate disclosed the latest progress regarding an incident in which customer funds were lost. It acknowledged that earlier communication and handling were insufficient and stated that a dedicated task force comprising security, compliance, legal, and business teams has been established to continue monitoring. Currently, the platform is assisting customers in completing document collection, conducting device security analysis, tracking fund flows, and following reporting procedures. It is also contacting Tether and relevant exchanges to seek interception and freezing of the affected funds. The incident’s next steps will still depend on police investigation and the efficiency of judicial cooperation. The platform has committed to continue investing resources to support rights protection.
#crypto #Binance #Gate
Just now, reminded by a friend, I took a look at the recent fluctuations of $BAS over the past two days, and I’ll follow up now.
On-chain status:
Starting from 3:00 a.m. today, the “whales” began taking batch accumulation actions at #GATE . This includes some wallets related to #DWF . It’s very frequent. Also, at around 12:30 p.m. today, they transferred tokens worth more than $10 million to the GATE cold wallet.
Contract holdings:
So far, I haven’t seen any changes. FDV is $306 million, MC is currently $76.6 million, and OI holdings are $4.1 million—this is in a low-frequency stage.
Summary:
On-chain activity is on the left-side (early) trading. It was detected in the initial phase of the market move, but you also need to look at overall data changes to determine the timing to enter. Please don’t just get on immediately the moment I post a fluctuation. For every fluctuation I share, I’ll continue to update and keep an eye on it.
On-chain status:
Starting from 3:00 a.m. today, the “whales” began taking batch accumulation actions at #GATE . This includes some wallets related to #DWF . It’s very frequent. Also, at around 12:30 p.m. today, they transferred tokens worth more than $10 million to the GATE cold wallet.
Contract holdings:
So far, I haven’t seen any changes. FDV is $306 million, MC is currently $76.6 million, and OI holdings are $4.1 million—this is in a low-frequency stage.
Summary:
On-chain activity is on the left-side (early) trading. It was detected in the initial phase of the market move, but you also need to look at overall data changes to determine the timing to enter. Please don’t just get on immediately the moment I post a fluctuation. For every fluctuation I share, I’ll continue to update and keep an eye on it.
Arthur Hayes's associated address withdrew 44,200 HYPE from Gate, worth about $2.93 million.
#ArthurHayes #HYPE #Gate
#ArthurHayes #HYPE #Gate
Ten minutes ago, three freshly minted wallets just pulled a total of $1.6 million from #GATE in
$PIEVERSE tokens.
Link:
https://intel.arkm.com/explorer/token/pieverse
$PIEVERSE tokens.
Link:
https://intel.arkm.com/explorer/token/pieverse
Update: $GWEI ：
Just now, on-chain data tracking showed that about three months ago (around May 2), 13 newly created wallets each withdrew a total of 256 million tokens from exchanges such as #GATE , #OKX , #bitget , #Kucoin , etc., amounting to approximately $27.24 million.
Starting around July 5, they began selling off in batches. As of last week, by July 25, all positions had been fully liquidated with not a single token left. The operator has abandoned the board.
Just now, on-chain data tracking showed that about three months ago (around May 2), 13 newly created wallets each withdrew a total of 256 million tokens from exchanges such as #GATE , #OKX , #bitget , #Kucoin , etc., amounting to approximately $27.24 million.
Starting around July 5, they began selling off in batches. As of last week, by July 25, all positions had been fully liquidated with not a single token left. The operator has abandoned the board.
About the controversy with the relatively high profile $BEAT these past few days, I’ll update you today. Based on on-chain data tracking, I found some hidden-side activities, so I’ll give everyone an interpretation:
According to the data, on June 9th, among the 20 new wallets created in the same batch, within the past month they were, in multiple waves, withdrawing a total of 18.77 million tokens from multiple channels such as #gate , #mexc , #pancakeswap , etc. The total is currently about $48.43 million. The most recent withdrawal was on July 31st, when 900,000 tokens were withdrawn that day, which proves that the market-maker’s actions are ongoing.
As for the on-chain small-amount part, I just looked into it: starting from August 2nd, there have still been frequent responses in the hands—large bot transactions for order-faking and arbitrage. And starting from August 3rd, major exchanges began to show frequent small accumulation (absorbing) behaviors. The small-amount data is also very healthy.
Regarding contract positions: the data shows that starting from 3 days ago, there has been large-scale de-leveraging/selling. So, combining all the above data, the conclusion is that the market-maker currently is not engaged in dumping large amounts of spot; instead, they are using contracts to control the market, forcing out liquidity. This is also perfectly reflected in the K-line: from the high point of 6.365 U on August 2nd, it fell back to around 2.348 U last night’s low. For now, we do not judge it as having stabilized yet; we need to wait for further observation.
Summary:
Based on all the collected information, the chips of $BEAT are currently in a healthy state. However, the contract positions are temporarily not very friendly. Based on all the above information and judgments: if within one week there is no launch signal, then it will most likely follow a sideways drift and bearish decline strategy, requiring some time to return to the hype level of $BEAT .
According to the data, on June 9th, among the 20 new wallets created in the same batch, within the past month they were, in multiple waves, withdrawing a total of 18.77 million tokens from multiple channels such as #gate , #mexc , #pancakeswap , etc. The total is currently about $48.43 million. The most recent withdrawal was on July 31st, when 900,000 tokens were withdrawn that day, which proves that the market-maker’s actions are ongoing.
As for the on-chain small-amount part, I just looked into it: starting from August 2nd, there have still been frequent responses in the hands—large bot transactions for order-faking and arbitrage. And starting from August 3rd, major exchanges began to show frequent small accumulation (absorbing) behaviors. The small-amount data is also very healthy.
Regarding contract positions: the data shows that starting from 3 days ago, there has been large-scale de-leveraging/selling. So, combining all the above data, the conclusion is that the market-maker currently is not engaged in dumping large amounts of spot; instead, they are using contracts to control the market, forcing out liquidity. This is also perfectly reflected in the K-line: from the high point of 6.365 U on August 2nd, it fell back to around 2.348 U last night’s low. For now, we do not judge it as having stabilized yet; we need to wait for further observation.
Summary:
Based on all the collected information, the chips of $BEAT are currently in a healthy state. However, the contract positions are temporarily not very friendly. Based on all the above information and judgments: if within one week there is no launch signal, then it will most likely follow a sideways drift and bearish decline strategy, requiring some time to return to the hype level of $BEAT .
青山-小添舔:
最优秀、最理性的博主，值得信耐👍👍
Log in to explore more content