Shocked, your assets in the cryptocurrency circle may be cleared at any time.
Two theft incidents occurred today, one was a Binance user, and the other was an OKX user, each one was more bizarre than the other.
OKX users downloaded a plug-in on Google Chrome. Friends who often play airdrops should be familiar with Google Chrome and plug-ins.
As a result, the plug-in was poisonous, hijacked the browser's cookies, bypassed the password and 2FA verification, and conducted counter-trading on some trading pairs with poor trading depth on Binance.
For example, buy 1, 10,000 and sell 1, 50,000. The hacker's own account is set to buy 10001 and sell 49999, which becomes a new buy one and sell one, so that your account can buy high and sell low, and you can buy low and sell high, and finally knock out all the money.
The awakening brought by this incident is: try not to log in using the web terminal. If you log in, remember to check Cookies when clearing the browser cache.
At present, the victim is still struggling. He said, "BN knew all this a long time ago, and knew which specific plug-in could steal the account, but did not make the necessary reminders. The transaction pair was obviously abnormal and there was no risk control." He Yi said, "The computer is infected, and even gods can't save it." It seems that he is not prepared to pay. In the second case, someone claimed that his account password was not lost. A hacker made a fake video through AI and retrieved his account through false documents. The account funds were stolen, and OK did not send SMS and email reminders. My OK was also stolen. I remember that there would be reminders when changing some key security measures. I don’t know if the hacker has any cutting-edge technology, or the victim is lying? But seeing that the victim is clear and organized, the probability of cutting-edge technology is higher. Let me tell you another case. Many years ago, there was an exchange called 796. Later, they also set up a T. Speaking of T, I and some friends invested 1,300 ETH in 18 years, and finally went bankrupt and liquidated. The loss was terrible. Both exchanges eventually went bankrupt and liquidated. But I have to say that their platform users lost 1,000 BTC (when one coin was several thousand yuan), and they compensated in full. In this case, the hacker obtained the login password of the victim's China Mobile or China Unicom mobile phone number, changed it to call forwarding, and finally logged in through the mobile phone number and achieved the theft.
796 believed that it did not do a good job of security control and paid the full amount.
I don’t know the victims of the theft of Binance or OK, but I think the platform should pay compensation, especially for OK, which uses AI to change faces. If it is proved that what the victims said is true, it is obviously the responsibility of the platform.
As for BN, at least half of the money should be paid. For one thing, like holding Cookies hostage, Sun Ge’s P network has been tricked, not to mention most retail investors. When you identify this risk, you should change some rules in the risk control system, such as regular repeated logins, abnormal buying and selling in a short period of time, verification of transaction passwords, etc.
Don’t think that it is none of your business. Today it is them, and tomorrow it may be you.