OKX's theft of coins in the past two days shows that.
Hackers must have obtained your account password, which is normal. Your account and password were stolen because they are the same as other websites. It is normal for many people to use one or 2-3 sets of passwords for multiple websites. Not many people are used to using 1Password to generate random strong passwords.
Then the hacker launched a flood attack on your mailbox, and OKX's mobile SMS 2FA must have loopholes. It is difficult to perform SIM swap on domestic mobile phones.
Suggestions:
1: Use 1Password to update your exchange independent password, such as 763hdhK@1, which is a password that is difficult to predict.
2: Enable Google verification.
