Poloniex "Security"

- i have double verification on Gmail, system is Linux, have also double verification everywhere but on on poloniex
-i am using different password everywhere I have account

So how? IP from success login are from Japan and Russia. I am getting these emails everyday, I've contacted poloniex - no reply. I've used link to close account but still getting these emails.


Good that my poloniex account was empty.
I have only problems with poloniex, so no keylogger possibility. I am logging to paypal and other cash services without any issues.

Thats worrying indeed. You have 2FA on your account and still getting this?

thats a shit ton of logins.. and if they're from different IPs from different times you could be on a database of some sort.. you sure you don't have the same password on another site?

-Check your browser extensions for anything you don't know
-Ask yourself "what did I download recently?"
also, if you are going to send bitcoin to anyone, double check the addres as there are some spooky malicious scripts that change the addres.

Rojuhh said:

thats a shit ton of logins.. and if they're from different IPs from different times you could be on a database of some sort.. you sure you don't have the same password on another site?

-Check your browser extensions for anything you don't know
-Ask yourself "what did I download recently?"
also, if you are going to send bitcoin to anyone, double check the addres as there are some spooky malicious scripts that change the addres.

Click to expand...

Man, my browser is clear, linux system, 0 extensions if it would be my PC fault, then whats about paypal, skrill, other bitcoin services or bank accounts? Everything is safe and not touched. Ofcourse I've changed password everywhere and reinstalled system. I think it's poloniex fault, many of people, even here have similar problems. Maybe they have leak and not informed clients.

tb303 said:

Thats worrying indeed. You have 2FA on your account and still getting this?

Click to expand...

yes

vinku said:

Man, my browser is clear, linux system, 0 extensions if it would be my PC fault, then whats about paypal, skrill, other bitcoin services or bank accounts? Everything is safe and not touched. Ofcourse I've changed password everywhere and reinstalled system. I think it's poloniex fault, many of people, even here have similar problems. Maybe they have leak and not informed clients.

Click to expand...

Even though they only touched poloniex, I would strongly advise you to atleast scan your pc. Better to be safe than sorry ¯\_(ツ)_/¯

Its definitely your PC or your email was possibly compromised. I have 10k in my poloniex so if its an issue on their side, why would people be logging into your account with $0 and not mine? Its you, not them, I assure you that.

Dagreyon said:

Its definitely your PC or your email was possibly compromised. I have 10k in my poloniex so if its an issue on their side, why would people be logging into your account with $0 and not mine? Its you, not them, I assure you that.

Click to expand...

gmail? impossible, 2 step verification
pc... hard to say, linux shouldn't have viruses but for now it's reinstalled

vinku said:

gmail? impossible, 2 step verification
pc... hard to say, linux shouldn't have viruses but for now it's reinstalled

Click to expand...

Ok, well if you're 100% sure its not your email that is compromised, then its for sure your computer.

Dagreyon said:

Ok, well if you're 100% sure its not your email that is compromised, then its for sure your computer.

Click to expand...

this ^^

Dagreyon said:

Ok, well if you're 100% sure its not your email that is compromised, then its for sure your computer.

Click to expand...

you cannot be 100% sure
maybe there are leaks it their database, you have 10k so you are lucky, nobody will mass attack before test leaks

vinku said:

you cannot be 100% sure
maybe there are leaks it their database, you have 10k so you are lucky, nobody will mass attack before test leaks

Click to expand...

Fine, be in denial. You want an answer to why its happening, its because your computer. If you don't want to accept that, then we can't help you. Its 100% you.

Dagreyon said:

Fine, be in denial. You want an answer to why its happening, its because your computer. If you don't want to accept that, then we can't help you. Its 100% you.

Click to expand...

again, this ^^

Its a known leak on poloniex.
They have tons of these hacks reports and still they do nothing

It seems there is a big lawsuite coming to poloniex
bitcointalk*org/index.php?topic=2018953.msg20140438;topicseen#msg20140438

The crypto-world is so insecure and dangerous. That's the main reason I will never invest in crypto currency, security.

Real hacker team probably found a vulnerability and is exploiting it. Sorry to hear. How much did you have on there?

for sure I've checked PC with kaspersky and few other antiviruses from windows dual boat - clean
linux checked also, clean

Dagreyon said:

Its definitely your PC or your email was possibly compromised. I have 10k in my poloniex so if its an issue on their side, why would people be logging into your account with $0 and not mine? Its you, not them, I assure you that.

Click to expand...

Are you unaware that alot I mean alot of polonix Acc is compromised. It may not be yours bro, but you may be next. So be careful.
Nobody is safe on poloniex

Poloniex is fucking dead now.

This happened to me too

I got an email telling me that my account was accessed from a Russian ip

This thread is starting to smell a bit of FUD spreading. Like @Dagreyon Ive got a reasonable amount still on poloniex. I have moved nearly all my btc offline but thats due to the aug 1st uncertainty and ive done the same with all the other exchanges.

The repeated logins in the OP looks like a bot. Why would someone with access repeatedly log into an account with a 0 balance. They wouldnt. They would rape as many accounts in as short a time as possible before the hole is patched.

@vinku, with respect, Im sorry but It seems unlikely that you had 2FA enabled. This would imply that google authenticator is somehow hacked but that means the attacker would need your key from your device or poloniex. If some outside attacker gained access to all the polo keys they would be offline and dead in hours. So people are also crying that its an inside job which is also frankly unbelievable. I mean take a rough guess at what they are earning from maker/taker fees - why would they shoot their golden goose to steal from a few accounts? It much more likely that your either got phished or your email/password combo is compromised elsewhere. Which is another point. Did you check those login emails were actually from poloniex?

To get a better idea of whats going on can the people who say they've been hacked answer these questions...

Do you have 2FA (google authenticator) enabled on the account?
Do you have email confirmation for withdrawals enabled?
Have you enabled any API access to your account? (if so what permissions did you give it)
Do you use any 3rd party services via API? (eg coinigy)