That's a HUGE problem. If this is true, I'd avoid using Shakepay until they can demonstrate that they've improved their security practices.
Coinbase does the same thing. Havn't checked if Binance does but wouldn't be surprised if they did.
There's no such thing as depositing "from a bitcoin address". That sentence doesn't make sense. You deposit TO an address (specifically, the address that the ForEx provider tells you to deposit TO). It's entirely possible AND VERY COMMON for a single transaction to contain bitcoins that were received at multiple different addresses. Which address would the ForEx broker require you to use in that case?
The forex broker has a separate BTC address for all users accounts. The transaction history of this address has only transactions that match my deposits. Of course the forex broker has custodial control over this address.
I think that the first time I made a withdrawal the broker saved that withdrawal address as the only one that can accept withdrawals in the future.
The timeline must have been like this:
I deposited to the forex brokers BTC address that they created for my account.
On June 25 I withdrew some funds using my Shakepay address. The broker saved that address however Shakepay changed it once the transaction was complete.
July 29th I attempted to withdraw again using the new address that Shakepay listed on my account but it failed because it did not match the address I had used to make the first withdrawal. I expect that, had it been my first withdrawal, the transaction would have been successful.
The address that Shakepay created for me has only one incoming and outgoing transaction that matches the transaction I made.
That's a HUGE problem. If this is true, I'd avoid using Shakepay until they can demonstrate that they've improved their security practices.
What's the problem? That's how it should be.
The incoming transaction should be OP's deposit to Shakepay (which is probably
the withdrawal made on June 25 from the forex broker) and the outgoing transaction should be the transaction made to Shakpay's wallet address from OP's deposit address.
Am I missing something here?
Yes the address has an incoming transaction from the FX broker and an outgoing transaction when I sold the BTC for fiat. Now, after my last withdrawal it has more transactions but Shakepay and other exchanges recommend against using the same address.