Around midday on October 28, Binance founder CZ called out several incidents in a post: at least four data leaks had been reported that day—some Coinbase users’ contact information exposed through its third-party vendor Amplitude (funds were unaffected, and Coinbase said its own systems had not been breached); user data from South Korean exchange Bithumb; and South Korean TradFi institutions including Mirae Asset and Daishin Securities. Monitoring reports from SlowMist and others put the number of Coinbase-related contact records at over 70,000.
CZ’s main point was straightforward: you can’t prevent every leak, but you can lock your own doors. Contact details leaked from exchanges are often used for phishing, SIM swapping, and social engineering. His practical checklist included using a unique email alias and a sufficiently long, unique password for each exchange; prioritizing hardware keys, passkeys, or authenticator apps (and relying less on SMS two-factor authentication); enabling a withdrawal whitelist and setting an anti-phishing code; regularly clearing sessions and API keys; never clicking links in emails; and avoiding public boasts about your holdings (to reduce the risk of physical coercion).
Four incidents happening on the same day are a reminder not of a problem unique to any one company, but of the need for good account-security habits. Funds being safe and a company saying its systems weren’t breached doesn’t mean contact details can’t be misused. What to watch for next is phishing and social engineering—not spot price movements.
#币安 #安全 #CZ This is not investment advice.
CZ’s main point was straightforward: you can’t prevent every leak, but you can lock your own doors. Contact details leaked from exchanges are often used for phishing, SIM swapping, and social engineering. His practical checklist included using a unique email alias and a sufficiently long, unique password for each exchange; prioritizing hardware keys, passkeys, or authenticator apps (and relying less on SMS two-factor authentication); enabling a withdrawal whitelist and setting an anti-phishing code; regularly clearing sessions and API keys; never clicking links in emails; and avoiding public boasts about your holdings (to reduce the risk of physical coercion).
Four incidents happening on the same day are a reminder not of a problem unique to any one company, but of the need for good account-security habits. Funds being safe and a company saying its systems weren’t breached doesn’t mean contact details can’t be misused. What to watch for next is phishing and social engineering—not spot price movements.
#币安 #安全 #CZ This is not investment advice.