Bitcoin Forum

I have got password reset email from yobit.net and pocketdice.io is this something related to recent cloudbleed bug in cloudflare? I have logged in both sites and everything was fine there.

The hacker may have tried logging in but couldn't because he may not have more info other than my associated email account.  :o

Yes I got it as well, it is not the first time for me. I have received the same email many times before but I ignore it as always because I do not use yobit and pocketdice anymore :)

cloudbleed bug in cloudflare has caused many troubles and most of online services have been affected by this event. Therefore, changing password can help you in some ways. I have heard that 0.0003% data has been leaked and according to the number of online users nowadays, that percentage is very big. You should change your password and as well as enable 2-factor

Didn't get any email from any site that I have used.
I don't know which ones I use have cloudflare as their provider.
Do they have to label on their site if they are using them at all?
Cause I do believe they are hidden when you log in to those sites unless they are detecting you as multiple times trying to log in using the same ip address (it will be recognized as a ddos attempt from their site) then they will show you their page and only at that point will you know you are connecting to a site that uses them for their service of protecting against those ddos attacks.

Just change your password just in case, you cannot assure that keeping your password will make your account safe, nothing will be taken to you if you just follow what they say and enabling 2fa is a big help also.

Will be better if you try to change your password. this is just to prevent your data gets leak.

This the same as what i experience in poloniex.. and i think you join in some website with the same name email and password they are trying to logging in and planning to get bitcoins again..
Better to careful when you are joining outside in the forum. i am still receiving someone are trying to logging in with my account in poloniex.. be careful guys dont use password again in other site..

Can you guys screenshot the email content? I have received mine at Yobit days ago but I already deleted it but somehow I can still picture out the looks of that email. Just want to check if it's the same as yours.


Poloniex and CCEX are having such cases even prior to the recent bug happening in Cloudflare.

no I doubt that it has anything to do with the cloudbleed bug, that bug has not affected any of these sites for sure. it is like a possibility because the hackers did not know about it and there are so many factors in play to make it vulnerable.

what you have experienced is a rather simple thing. you should check this yourself on yobit but usually these sites are like this: when you forget your password they just ask for username and/or email address and your username is a public thing that you even put in chat (trollbox) and your email can be leaked if you used another service with the same email address.

for instance I can go on one of these sites and put in "mobnepal" and click forgot password button and they send an email to you with a link to reset your password. and this is not affecting anything !!!

I am not registered with pocketdice but am a member of yobit exchange but didn't get any email following cloudflare bug.
Although I got an email fro kraken to change my password and 2Fa but nit from yobit.
You better change your password and inform yobit support of the email.

I also received an email from yobit. I didn't click on it because I'm always login to yobit, my browser is set to remember yobit because I'm always in that exchange. I don't think someone can actually hack my account as I don't even remember mine because its gibberish with about 24 characters.


The only site so far that declared they were affected  by cloudbleed hack was chronobank. I don't even think it made them shutdown for a minute. The hacker may just want us to login to fish and take our passwords.

I think it would be better to reset the password in all the sites affected by this cloudfare incident

No doubt that your accounts were affected by the cloud bleed. Don't be comfortable that you will be safe and since there is an email reset password sent to you. Just completely change / reset your password for your own good. It's better to be safe rather by doing immediate reset. Don't wait that there would be another attempt.

Request a new password reset just in case this is a scam to get you details.  Have you contacted either site to see if this is real or was there any news on both sites about members get as password reset email I would never respond to any email that you did not request to do with security off your accounts.

I've been getting a similar email from HashNest (about a remote login reminder), but I've been figuring it's just a ruse to get me worried and log back in. Ignoring it for now.

https://cdn.meme.am/cache/instances/folder838/400x/64175838.jpg

FYI,the bug has been discovered and solved.There wasn't a "hacker" involved technically but the system was prone to vulnerability discovered.No active leaks have been registered this far.

I've got email a month ago, i contacted support and they told me if it wasn't me that i shouldn't change password.

Also, seriously guys, even if you get an email, DO NOT CLICK A LINK IN IT unless you requested it. Emails can be forged. ALWAYS go to the actual site to initiate changes/log in. They will possibly send an email after that (not sure in this case), and then you'll know it came from them.

i got password reset email from yobit too and i remember this is not the first time that yobit send this email and i dont' do anything because i think its only some email that want to stolen our data so i don't click any of the links in that email, i only delete the email as soon as possible. but i am prefer to change my password from the yobit site itself because i think its more safe than click from the links in the email and i think this is because of cloudflare that have a bug and i hope cloudflare is finish to fix the bug.

I was just thinking the exact samething when this happened.
There will be a lot of emails being sent out by hackers who want you to click the link to change your password while they are phishing emails and send them to a keylogger and then they have your password.
Be very warying of what you are receiving in any email you receive tell you to change your password after clicking "their link". :-[

My advice for this circumstances happening is, please avoid clicking any e-mails having links which you doesn't actually familiar with because that is one way that hackers can easily access your personal informations and might reset your password. If anyone experienced this please contact yobit and pocketdice admin support and they can immediately give you full technical support on this, because this is a very serious matter.

I have received in the past in both websites. Good thing is that hacker cannot really do anything to me even if he knows the password of my yobit or pocketdice because I have 2FA activated in my phone.

The hacker tries another way and asks for a forgot password. Now this is something really fishy and if you don't have your email protected with 2FA (to receive a SMS to your phone number any time you log in) then you are in trouble. To access a password reset email he needs to be logged on my 2FA email, thing that is impossible for him. Because even if the hacker knows both for example password of my pocketdice and my google mail he still cannot do anything to me.

Conclusion: 2FA when set in a clean machine is a life saver.

I have nothing received from yobit.Only received mail from bloombit they site is close in 10 march.

same experience with you almost everyday i have got password reset email from yobit and pocketdice one of my email i use to register at that site but till now i can login without any problem, that email is only because someone tried to login at our account but they never know our account's password :)