Bitcoin Forum

Hi guys,

 What doing in situation when bittrex account was hacked via email? Lot of peoples were hacked today, hacker attacked their mails first and then bittrex. F2A was enebled as well. In these cases there was not phishing webpage. Have Bittrex insurance for these cases or not?

I think not so many account hacked. They may just fake bittrex mail, similar to perfect money problem.

where did you get the info about hacker bittrex accounts?
i dont have there any insurance...
need to put 2FA on the email also... it can be another layer of security

This is outstanding news. Where do you get that? Any links, proofs?
If this is true I don't think that Bittrex or any other exchange have insurance for this kind of cases.

Sounds bad.. Is that true? I still doubt about this, because I just found out right now from you. As far as I know and my knowledge.. I've never known that bittrex account can be hacked and I never knowed yet at all there are some people who had been hacked in bittrex via email from the previous. I personally still has been safe so far buddy.
But it's good.. from this info, make us be more careful again of everything that will be happens although not yet certain.

Very bad.Feeling sad for them. Actually I got the same type of emails few days back. But I didn't respond.

i read about two days ago. Yes, Lot of peoples were hacked today, hacker attacked their mails so i transfered my coins and usdt from bittrex to poloniex. Now i keep safe on my money on poloniex

My friend was hacked too,f2a enabled ang ip is whitelisted how the heck happened ? he lost 27 BTC.Just beware about the emails you receive.

Not only bittrex even I got Mail from scammers saying coinbase account and etherdelta account trying to login from some country there is lots of mails are coming now a days don’t click any link it would be the best . Try to update system and frequently clear browser history and cookies.

Info I have from good source, friend lost 2btc. He didnt enter phishing site and also didnt clicked on any fake mail. In bittrex he have unusual activity detected from Australia. All his alts were sold into BTC and BTC was transfered away. Bittrex didnt replied him until.

BITTREX IS ABSOLUTELY COOKED.

I don't think Bittrex provides insurance to this kind of cases when an account is allegedly hacked. It is the users responsibility to protect his own account. Bittrex on the other hand can offer options to secure your account like 2FA and they also recently added the new ip address log in where you have to log in using the link sent to your email in case when your account is logged in using a different ip address.

But he used also 2FA. Password he have strong. Really dont know how it happen.

If bittrex was hacked that would have been a major news in the crypto community. Just like the parity hack.i have been online for 3 days straight and didn't see that news anywhere.so please when u introduce a controversial news story please back with a link to us source.u don't just come here and make a post and a controversial one at that and nothing to back it up and expect us to believe u.i have a bittrex account and did not even receive a notification mail from bittrex about a hacker on the loose. U might be right but if u want to be taken seriously in this forum also back up ur claims with facts

Please provide evidence, it's easy to put on an online forum that something was hacked, insist people to draw all their funds to other exchanges. But bittrex has a lot of accounts so if only 0,01% is hacked due to hacked email adresses that's not really suprising tbh

Thank you for this info and warning - however, could you please post your source?

maybe web phising. Its better to actived F2A and SmS verification in your account
I use bittrex and do not have a problem.

Source I wrote above.... it looks like this.
https://ibb.co/nfmYF6

If this is true ,we better get our coins and transfer it to another exchange maybe poloniex?

again bad news for bittrex  :'( . are there any further infos/links?

just such news confirms again my acting to never hodl something on exchances because there is always a rest risk to lose all of yout stocks. hopefully it has not hit this users too hard and lost everything!

There is nothing from Bittrex because Bittrex probably was not hacked... hacked were email accounts and attackers probably ask for forgot password from bittrex or so. But these mails were probably imediadly deleted because he havent any mails from bittrex in mailbox.
But attackers must knew these mails are connected with bittrex, maybe leaked all emails from bittrex?!?!?

Your money is never "safe" on an exchange. Not even on an exchange the size of poloniex.

I believe that was because someone gains possession of thejr pc/laptop. either trojan from wallet download, email link scam, social engineering etc.
Recently daytradernick (twitter) got hacked from downloading wallet that has trojan. So secure yourself bookmarked, use different PC from trying wallet and other stuff

I don't see SmS verification only F2A. Do you think SMS is good protection? I read somewhere, it's easy to hack and not recommended for use.

I also use Bittrex. And I'm very sad to hear about such problems.

Seems more likely that the emails got compromised, or maybe these victims downloaded some shitcoins closed-source wallet with backdoor/trojan that allowed the attacker compromise their PC.
I don't see how the hacker could have bypassed the 2FA otherwise.

That's unfortunate because Bittrex.com is the top crypto-currency exchange today maybe that's because they were hacked.
Because nobody can hack crypto-currency network then they're attacking users, owners and crypto-exchange, now that's devastating that top crypto-currency exchange sites were attacked not only Bittrex.com, since earlier this year, some top crypto-currency exchange sites also were exploited and users were upset about it.

No source because its nothing new. Everyday a lot of accounts are getting hacked through people's carelessness. It must be some kind of phishing or an email where download links are inside which are full of malwares. In this case what people should do is to activate all security features available and don't be too careless, Do double check on things.
And lol. No company is too dumb to give an insurance on this because this problem is caused by the user furthermore users will probably just abuse it to gain money if ever it comes true.

LOL so good I did not finish my advanced verification, so nor me nor hacker can take anything off my Bittrex account :P    Seems everything is good for something.

Can you ask your friend to post User activity log from bittrex when he got hacked, would be interesting to see how the hacker got past 2FA.

That's why I've enabled 2FA on my email account. But where is proof of the news?

I call BS

Any source available for that?

If you are enabled 2FA, It's hard to hack via email or fake phishing site.

And that's why they do not care about their accounts. Bittrex is a secure trading account and it has many features to keep our wallets secure. Similar to 2fa Google Authenticator, Email verifacations. And one of the best things here is that when you log in to another ip address Bittrex will not allow it to open. The bittrex will email you to confirm whether you are logged in. All you have to do is press confirm on your wallet.

After reading all comments one thing is sure that only OP or some of the users account got hacked due to their email account was hacked first. so i think this is not the problem of Bittrex exchange as the users email account got hacked and hacker used that email to open their Bittrex account and stole their coins.

Oh gosh, that is terrible!! Do you know if in such cases people are re compensated? Was he sent an email that appeared to have come from Bittrex with a link in it which he clicked? It's scary to think they got past the 2FA, OMG!! I am sorry for all the questions, I just need clarification so I can be as safe as necessary.

But for those who had 2FA enabled, how did they get the code to access the account is what puzzles me.

I have not heard any of these news about hacking accounts in bittrex ; Maybe it is an attempt to discredit site  ???
Yes bittrex blocked some accounts but i think users need verification , This is happening with most exchange
sites recently

Please do not scare investors and traders !!

Where you have money you need to enable 2FA and the security is much much better.

This sounds bad for Bittrex but do you have any proof like a link you read the news about Bittrex accounts being hacked or a screenshot perhaps? I believe those that were hacked (if ever there are) probably opened a fake email and got their information because most likely thats what happens.

Oh, another bad issue on bittrex. First off the holdings of accounts and next is this one? This is a bad angle for bittrex right now. For as we all know, bittrex is one of the trusted and most reliable exchangers.

Bittrex is still reliable, your only problem is the hackers. So becareful everyone. Get lines of defense for your own wallet.

I trade through Bittrex. While there was no problem. But, I heard from acquaintances that recently wallets were hacked on Blockchain.info.

I am sorry, but how can Bittrex account that is 2FA enabled get hacked?
I mean if you don't get keylog, it should be fine because even so it takes 2 code to Login + Withdraw?

Anyhow, gotta becareful with all the crypto accounts, never put same password and reveal your mail there

We all have to be very careful, use antimalware and antivirus software, set up 2FA to every exchange and mail service, use strong and not the same passwords for any site, do not visit porn and torrent sites, avoid phishing links. It all is pretty simple to do, but still there are so many hacked accounts. It's a CRYPTO market and everybody should be prepared.

I don't understand how they get the mail..

To be honest I don't trust these centralised exchanges at all. I am one of the lucky ones to managed not to be hacked but been very close twice to loose my funds though. I'm talking about Mt.Gox or BTC-E. I was listening to my elders and took my funds only for a quick trading to an exchange then withdrew them to my cold wallets afterwards.  I'm sorry for all of you who's got hacked and lost your hard earned money.  I can't wait to see Exscudo' s upcoming exchange to solve these security and centralised issues.

Is this true or not? Its not good to spread a false humor like this. It is very alarming to those who have account on Bittrex and they might withdraw immediately their coins out from it just because of this news. I hope that this news is really fake and please stop spreading it because it is not helpful.

Without proofs this thread is just FUD spreading, no more. There is nothing about it at twitter. I suppose that so huge hack should be mentioned at many news channels and sites if it's true.

Need to look into their T&C for compensation terms.

damn came across this post now and a little scared. checked my account on BITTREX like everything is fine. I always thought BITTREX exchange is most reliable, more reliable than POLONIEX and now do not even know where to go for trading. Polo is also a lot of problems and unhappy

Usually it begins when you get web phising, it's better if you get email, don't click what inside it, retyping is better because now many phising accounts, you must be more careful to see it, dont be fooled.

I also flipped through the twitter first. No complaints. I think it would already be a lot of noise from news and disgruntled people. This exchange has a great deal of trust from traders.

Guys omg I dont need spread here any FUD... he went actually on police but he need wait untill monday for open hours for cyberpolice...
Here is image where is possible see that there was someone from Australia but probably fake IP. https://ibb.co/nfmYF6

And this is transfer detail, BTC was sent here:
Address: 1MQV6Azrte8zMrwGxSZh6qsaoxsFLgsWqr
TxId: 53006f983541ac87a356d153a450abb8c7a0723277a0697fdd4b8ec0cca5e479

But that's his email activity log, is it possible for him to upload activity log from Bittrex when he got hacked?

So you do mean there are unusual log-in attempts on some accounts which is possibly being compromised but telling to public about the thing of many account were hacked then its not appropriate because you cant post a proof that there are lots already and bittrex would make an announcement if theres a breach or security flaws. Theres might some instances but would really be few in numbers this is why we should always set 2fa or secondary layer of security on our accounts specially if theres a fund inside it or coins being stored up.

We would have heard for sure if this was a massve hacking issue, there could be many factors leading to your friends issue, often there will be phishing emails sent to try and trick users into clicking and entering thie login details.

What did Bittrex have to say on this matter? did your friend contact their support?

They didnt replied else, he had 2fa enebled. But now he think is bad he had saved code in mail. :-/

Look on this wallet which I sent there are two transactions, probably both from hacking.

how did you know about this news ?
is there any announcement or something about this,, especially from bittrex and the users that being hacked ?

In my opinion, how a person can enter in your account if you have applied 2FA on your account and only you have control of your authentication code on your device. In my knowledge, i have never heard any hacking or phishing attack on Bittrex website. Everyone have to apply security measures and never enter your data if that asked by mail because no company ask you to give them your personal details.

Why is there no U2F support from any existing exchange except for etherdelta ? I think there are many people who own a nano ledger S in the meantime and could use it for 2FA on exchanges.
So in my case, I would like to use my nano ledger S for two factor authentification instead of google 2FA on a smartphone.

I can't believe in this story, we need some proof.
If you have 2FA, you need the device to get the pass code that changes every 30 seconds or the hacker is like god and can bypass it.
In bittrex, if you acess from differente IP, you need to confirm via email, so hacker need to hack your email too.
Not impossible but its very hard to get something like this.

I think your friend doesn't have 2FA, only email alert, so if his password compromised he got hacked.

Is possible contact owner this wallet? There went stolen btc... https://blockchain.info/address/1MQV6Azrte8zMrwGxSZh6qsaoxsFLgsWqr

I also think that the victim could be the hacked one, maybe his computer is compromised. Otherwise all other accounts would probably have been hacked too.

Can cyberpolice help? Anybody have experience with them? Only what we know is where btc went... there https://blockchain.info/address/1MQV6Azrte8zMrwGxSZh6qsaoxsFLgsWqr

I believe that is the case. Bittrex is the best exchange I've seen so far and probably hackers are gathering together just to hack bittrex customers. I'm not really surprised if that is what's happening because it is really a good target for them so always be careful folks.

Some update, friend was at Singapore cyber police and they recommend also fill paper for FBI because Bittrex is under USA. They have also few cases for this IP adress, but they didnt said more. Bittrex is quiet.
Hope somebody will help him. On this wallet where were transfered his btc is another big transfer with 1.4btc again hack?

Still waiting for that activity log from Bittrex.......................

Wasn't this expected?

Many have been facing a heck of problems with Bittrex for weeks now (though I didn't face any problem at all, I still withdrew all my coins weeks back because of all the issues & reports around here).

Good luck to the affected ones, this is very sad news for them.

Too many problems with Bittrex nowadays. Starting from the disabled accounts and now this case accounts being hacked. I don't think there is an insurance for cases like this. Last month, I also saw someone posted this kind of situation being hacked even if 2FA is enabled. It turns out that his e-mail was hacked so the hacker just e-mail bittrex about the 2FA and then able to access the account. Nowadays when money is transmitted digitally, there are more hackers out there waiting for their next victim so we should always secure our account by not just downloading any apps or software or click links. A hardware wallet is important as well so that it would be secure from hackers.

No

I have launched a telegram group. I want all those whose account has been disabled to join to this group. and if we needed to file a lawsuit against them we can do it collectively for better results.
everybody is welcome
here is group:
https://t.me/joinchat/BjmOlA2Ir-_l5XhBATHoTg

I'm leaning toward your opinion. The odds of hacking IP based email verification is hard enough, let alone 2 part logins. It sounds more like the people losing their coins have a security issue on their end rather than on Bittrex.

I sure hope this is the case. I don't want to wake up one morning to a Nicehash scenario, where there may not have actually been a hack and could have been an outright theft. <<<That is the one thing none of us can control. HitBTC is starting to get a shady rep and even though I still believe they are legit, it is worrisome.

Any exchange/pool/wallet is only as safe as the coders are honest. This is why I have abandoned JAXX, opting for Exodus.

Gotta be very careful especially at the levels the markets are at.

If you enable 2fa function then even though hacker gets your login access they can't do anything in your account because they need access to your mobile phone as well. That's why before adding funds to any online accounts it is better to enable your 2fa function to safeguard your money.

Bittrex has been hacked 1/3/18.

Sucks for basically lost life savings.

Awesome job Bittrex you Fxckers

For once I am glad their DHS police state verification scam locked me out of being able to withdraw a month ago!

I have been avoiding enhanced verification in the hope that the fix their basic verification up, and just going without the ability to withdraw.

I think it is good if Exchange can use hardware wallet for trading.
Trezor support this but only Bithumb use it

by using hardware wallet for trading it is safer for us and also for the exchange

I've had a small 4fig portfolio sitting in Bittrex for a couple months, did my first small withdrawal to test and it worked perfectly. No issues for me, yet anyway.