What happened:
a) you were careless by reusing your password and also using the same passwords in multiple services.
b) this password leaked before multiple times and we showed you a service where anyone can purchase all your passwords.
c) among hundreds of thousand of users you were one the very few users who reused leaked passwords and was affected. You admitted that you reused a password from a previously leaked database.
d) our service is not hacked, no data breach happened, no funds were lost. If the app simply allowed hacking the bad actor would have stolen millions of dollars, which never happened.

Below is our post mortem explaining what happened in your case.
https://tab-trader.com/blog/

The best course of action for you is to contact you local law enforcement.
Exchanges will be able to reveal bad actor identity because he was KYCed.
And you will be able to get your funds back.

Try to avoid the following your mistakes in future:
Do not to reuse old passwords
Do not use same passwords on multiple services
Do not use passwords with you name
Use strong unique passwords especially in financial services

Because ultimately your mistakes allowed the bad actor to simply login to your account. He was not even trying brute forcing, he just logged in. Because he knew your leaked password.

This is 101 Data Breach fyi.
Poloniex or Coinmana gets hacked. Some emails+passwords+some other info is then sold on darknet. Buyer gets the entire database and tries all entries on all similar websites, including other exchanges, wallets, emails, online banks, apps.

You can see how many times your email was leaked  and even set alerts on new inputs here: https://haveibeenpwned.com/ or here https://monitor.firefox.com/
Additionally you can use telegram bots and even see parts of your own password -> @mailsearchbot   

You ever wonder why you and mixicali are alone in this thread?
Because almost everyone else uses a strong password and doesn't reuse old passwords.
And just by using Google Signup you can eliminate this password altogether, because it uses a different security mechanism.

Mixicali, do you understand that you reused a leaked old password and a bad actor just logged into your account?
Just logged in. It means he had your login and password.
There is nothing wrong with an app.

You won't be blaming a thief if you leave keys to your apartment on the main market square in the city. And never change the locks after the first theft. And use the same keys in all your apartments, houses, security boxes.

The best course of action for you is to contact you local law enforcement.
Exchanges will be able to reveal bad actor identity because he was KYCed.
And you will be able to get your funds back.

Try to avoid the following your mistakes in future:
Do not to reuse old passwords
Do not use same passwords on multiple services
Do not use passwords with you name
Use strong unique passwords especially in financial services

Because ultimately your mistakes allowed the bad actor to simply login to your account. He was not even trying brute forcing, he just logged in. Because he knew your leaked password.

What happened to mixicali.

This user:
а) you were careless by reusing your password and also using the same passwords in multiple services.
b) this password leaked before multiple times and we showed you a service where anyone can purchase all your passwords.
c) among hundreds of thousand of users you were one the very few users who reused leaked passwords and was affected. You admitted that you reused a password from a previously leaked database.
d) our service is not hacked, no data breach happened, no funds were lost. If the app simply allowed hacking the bad actor would have stolen millions of dollars, which never happened.

Below is our post mortem explaining what happened in your case.

Hello

You were removed because you violated the rules of the telegram group.

We are 100% with you.
We really are sorry that you lost some of your funds.
We are trying to find what happened.

Hello respectable brother.
It means that we still doing our investigation.
We are on your case.
There are some preliminary findings which we are trying to confirm.

But like we said if we were hacked and our user data was compromised hundreds of thousand of users would have been here in this thread. But they aren't.

God, will you relax. We are helping you at the same time as you spread this accusations.
It is the first ever time anyone has reported anything like that. Hundreds of thousand of users never had this issue.

This user lost funds because of some yet unidentified reason. We are helping him find the reason.
But is seems that he got his credentials compromised. Possible attack vectors are: phishing websites, loss of API keys, sim swapping. But check the thread for updates

I will copy paste what I wrote in the original message of this user.


For everyone concerned:
1) This individual is the only one had this issue out of hundreds of thousands of users. If there was an issue in the app, scammers would have used this vulnerability multiple times. Why scam one person if you could scam all of the users. Just doesn't make sense.

[For full disclosure 2 of his mates also from the same African country reported this issue. Maybe it is the same person just with multiple reports: one in the app, one via email, one in our telegram group. Anyway we are talking to all 3 of them in best faith trying to help.]

2) Preliminary investigation showed that this user has compromised his credentials somewhere.

3) But we believe it is unfair to go reporting that such an established and reputable app is a scam without any proof. Moreover we are trying to help him understand what happened the very same moment.

More will unfold later.

We are helping you identify what happened to your funds.
And yet you go to forums too.

For everyone concerned:
1) This individual is the only one had this issue out of hundreds of thousands of users. If there was an issue in the app, scammers would have used this vulnerablity multiple times. Why scam one person if you could scam all of the users. Just doesn't make sense.

[For full disclosure 2 of his mates also from the same African country reported this issue. Maybe it is the same person just with multiple reports, one in the app, one in email one in telegram, group. Anyway we are talking to all 3 of them in best faith trying to help.]

2) Preliminary investigation showed that this user has compromised his credentials somewhere.

3) But we believe it is unfair to go reporting that such an established and reputable app is a scam without any proof. Moreover we are trying to help him understand what happened the very same moment.

More will unfold later.

EXMO is now available in TabTrader Android app for trading crypto currencies. You can access your account, trade on the go, set price alerts. Your API keys are encrypted on the devices and are only available to you. For extra security use PIN protection. UPD: now charts have fully customizable technical analysis.

We are happy that EXMO exchange is now integrated. Trade BTC/USD, BTC/EUR, BTC/RUB. You can join the other 250,000 traders for trading on EXMO with your smartphone. We know the guys personally and can vouch for them.

Graphical bid/ask representation is a great idea. We will implement it soon. It's just that we have so much work, that certain tasks only become high priority when users ask for them

Thanks! We are working on iOS version. Coming out soon!

You can now trade on Gatecoin through TabTrader Android app! More info available here

BLEUTRADE now is mobile with TabTrader. Trade from your Android device today!

Bleutrade.com is now mobile with TabTrader. Bleutrade is an advanced cryptocurrency exchange with low fees of flat 0.25% and 116 different coins making trading super easy, especially now with a mobile interface of TabTrader. Join 23,000 traders to experience the best trading tools for the cryptocurrency market. Bluetrade is owned by its community and distributes its profits as dividends to the community. You can also become an owner of this exchange

TabTrader is proud to announce integration with Singapore-based Quoine - the highest-volume bitcoin exchange operating in the Japanese yen market. Highly regarded amongst professional forex traders, Quoine offers accounts in 10 fiat currencies as well as bitcoin.
Quoine spearheaded Bitcoin penetration in Asia through its integration with Econtext payment processor, allowing thousands of online stores to accept bitcoin. This brings an unprecedented level of liquidity ensuring there is always a counterparty for your trade. Exchange currently averages volumes of between 500 and 1,000 BTC a day.
Moreover, the exchange allows up to 25x margin trading (with bitcoin or fiat collateral), algorithmic trading, Japanese yen futures, interest-earning bitcoin lending and API access.
Be sure to sign up and benefit from 0% trading fees in October.

@XinXan, one first has to generate API keys from the console of his exchange account and then put them into the app. It is at this stage that you decide what permissions you are giving to the third party apps that will control your exchange account via API. As I mentioned before, you do not need to give permissions to withdraw funds. See this example.
Once you've added an account to TabTrader (by inputting API keys generated earlier), you would be able to send and manage orders right from your Android device.