Rereading an old article: Dilation Effect A preliminary statistics of account password leaks of more than ten major exchanges, each of which has thousands of leak records. The security of SMS and email verification codes is basically zero in the author's opinion. It is recommended that users at least use Google Authenticator as a basic security setting that must be enabled. Users with higher security requirements can set up a physical Ukey. If you only set up an email verification code or SMS verification code, it is only a matter of time before your account is attacked. Read the full article: