Be careful with your asset in CEX account

[Davidvictorson]

While you are working hard to build generational wealth for yourself through acquiring cryptocurrency, someone out there is strategizing how to steal that crypto wealth that you are building up. They are busy reading articles on how to do it. Whether it is CEX or DEX you use you must protect your account. You must learn the right and most recent way to do it. You must not postpone it until a later time when you have up to $1000 before you do so. I do not support leaving your assets in a CEX but we know that even if you shout from now till tomorrow, there are people who would not heed our warnings. Your security should be your personal responsibility and the most important thing to you.

[Sticky Bomb]

I also use 2FA for my Gmail account but I do not know how effective this is because I was able to login without the 2FA. Probably because they noticed it is the same device but I do not know. I will be glad if someone can correct me about this.

If you logged into your Gmail account from the browser, Chrome allows you to login without 2fA interference if you've the email already logged in on the same device since it's still Google product, you'll have to confirm it's you maybe by using fingerprint or any active device security. but other browsers wouldn't be granted such access by Google and your 2FA would activate.

If you log into your exchange, as far as the email connected to your exchange is logged into the device, it would allow access, but send a notification to the email concerned of à new login attempt to his exchange account.

But still am still concern on how the person gain access that easily .

Your friend's who's email was compromised didn't setup 2FA on that email or he used the scammer's email as recovery email which enabled him to recover that email even with 2FA setup on your friend's device.

[Smartvirus]

While you are working hard to build generational wealth for yourself through acquiring cryptocurrency, someone out there is strategizing how to steal that crypto wealth that you are building up. They are busy reading articles on how to do it. Whether it is CEX or DEX you use you must protect your account. You must learn the right and most recent way to do it. You must not postpone it until a later time when you have up to $1000 before you do so. I do not support leaving your assets in a CEX but we know that even if you shout from now till tomorrow, there are people who would not heed our warnings. Your security should be your personal responsibility and the most important thing to you.

Security is never an agenda to be postponed. If your procrastinating on getting your security measures set up rightly, your as well setting yourself up for a fall. You don’t get announced to before your hacked or your coin is stolen. You have to arm yourself always with the informations you’ve got and best practices to stay secure. One thing that is there to know is that, the window to every compromise always starts with you.

Should you be leaving your coin on CEX, you’ve left yourself open to whatever vulnerability that might arise from CEX and you’re to blame.

[Stable090]

So a friend of mine contacted me this evening telling me how someone almost compromise his Gmail to access his exchange but he where lucky to have noticed it on time , so e quickly did the needful by login the person out and changing the email details, unfortunately he the same person or individual also compromise my friend brother email and he where able to gain access to his cex account and he where able to withdraw the money fast before my friend bro took noticed ( which is sad ) .

Na very wrong idea to Dey leave coin for exchange, and some people come Dey make mistake of saving their private information on internet, some people go save am for their Gmail, come go carry am put for their phone, wey be say if anything happen to the phone, then everything don go be that.

Cex no make sense to leave coin inside self, not because of the security reasons alone, few days ago, na him one of my guy chat me say KuCoin lock him account, and the funniest part be say him no even deposit recently for d account wey you go think say na because of the money wey him receive make dem block am.

Na later him come send them message for gmail, dem ask am different Mumu questions, after like 4 days Dey come unlock the account give am. If to say him no get luck, na so all d money wey Dey d wallet go take go.

Plenty reasons Dey wey no suppose make us Dey leave money for exchange, We suppose carry exchange like say na market, if you buy everything wey you need finish, you go carry am go house.

[Abu-Naim]

I know some of us here are still holding some token in some exchanges, but still Dex is more preferable tho. But still am still concern on how the person gain access that easily .

The best way to be safe in crypto space to have your funds saved in your personal wallets you have it’s private keys in your possession; centralized exchanges are not safe to hold our assets for long period of time.

Always treat centralized exchanges as market place where you will go and buy some goods and then take them back home because keeping your goods in the market is not safe. For safety purposes, always withdraw your money to your personal wallets after trading in CEXs to avoid losing your money due to lack of trust because I’ve the exchange get hacked, you will lose your money, while if you have your private key saved, you access your wallet anytime anywhere.

[ASloveapg]

We don't want to lose our hard-earned money. We all protect our accounts as much as possible. But many new methods can breach our security and access everything very easily. We shouldn't trust exchangers completely. In particular, we should avoid depositing money on exchangers. Google has access to all our platforms. If we somehow lose our Gmail, there is a chance that everything will be stolen.

We should first secure Gmail. We should use fingerprint security on Gmail. We must use 2FA. The login warning system is always on, but we have to take care of it. If your Gmail is protected, then no one can easily access the exchanger. We should all use decentralized wallets. And store our seedpasses in an unlocked way. Let's all take care of the little things first.

Ensuring security is one of the most important things in storing assets like Bitcoin. It is better not to store money on exchanges for a long time, because exchanges have been hacked many times, as a result of which users have lost their assets. Because exchanges cannot provide complete security of your assets. That is why decentralized wallets are the best option, where storing the seed phrase safely is mandatory.

And the thing is that Gmail will not give you much security, you have saved all your keys in Gmail, but anyone can hack your Gmail for some money and destroy it, as a result of which you will lose your keys. But that does not mean that Gmail should not be kept safe, everything should be kept as secure as possible. 2FA should definitely be kept active.

Now the most important thing is to save the seed phrase of your wallet and all the keys offline. Do not save any screenshots or online documents. Write down all the keys in a diary of yours, and keep it in a locker. Or store all the keys on an offline pen drive, and keep the pen drive away from all internet connections.

Small mistakes can lead to big losses, so it is necessary to be safe from all sides, and store all the keys offline.

Apart from this, you can use a hardware wallet to store your Bitcoin assets with maximum security, I think you should use a hardware wallet to store your assets with 101% security for long-term storage, because there is no possibility of hacking in it, but it has to be stored physically safely.

[Cossyblack]

This is why I don't keep my assets on CEX considering the risks,buying and storing of valuable assets on Exchanges especially the way this exchanges are getting hacked is not ideal ,this is because No Centralized exchanges is 100% safe and free from getting hacked and that's why Decentralized Exchanges remains the most preferable when it comes to security and safety of users funds.

Exchanges often send messages  given assuring words of safety of users funds under their watch which I find untrue based on past successful attempts on exchanges getting hacked especially from the Famous Lazarus group responsible for major attacks on exchanges and funds been stolen.
Long term holding of assets should be on DEX where guarantee of your assets is assured,free from been stolen or hacked,other security measures that will help to keep your funds safe should also be taken serious as hackers continue to create devious means to steal funds.

[DubemIfedigbo001]

The story quite funny because the person did p2p and deleted the account to avoid any form of trace,

The person is ignorant, The CEXs are always a step ahead of scammers, they keep P2P logs, and you can see the account that was used to receive any funds by the scammer on the order history. good thing order histories cannot be deleted, you just need to click on the specific order to get the details. You can go ahead and take the account number and bank name to find out the owner of the account and initiate legal process from there.

Good thing account names are not nick names, but real names identified by linked BVNs.

[Cryptohygenic]

The story quite funny because the person did p2p and deleted the account to avoid any form of trace,

The person is ignorant, The CEXs are always a step ahead of scammers, they keep P2P logs, and you can see the account that was used to receive any funds by the scammer on the order history. good thing order histories cannot be deleted, you just need to click on the specific order to get the details. You can go ahead and take the account number and bank name to find out the owner of the account and initiate legal process from there.

Good thing account names are not nick names, but real names identified by linked BVNs.

Even me self the matter tire but the way Op take narrate the story just seems like childs plays for something way dey very important as e concern wallet invasion where long time asset dey hold on to.
E for just better say the story finally end say dem catch the guy way steal the funds rather the as the matter com be like say the thief no dey traceable for transaction way dem execute for exchange and e com still be say em use p2p to exchange the coin to fiats way the paid in account number dey tradable able.

[justinlamode]

So a friend of mine contacted me this evening telling me how someone almost compromise his Gmail to access his exchange but he where lucky to have noticed it on time , so e quickly did the needful by login the person out and changing the email details, unfortunately he the same person or individual also compromise my friend brother email and he where able to gain access to his cex account and he where able to withdraw the money fast before my friend bro took noticed ( which is sad ) . This is why keeping or storing your funds in cex account not safe but I haven’t fully understood the story , but if there’s any update you guys need to know that will help you guys improve your security I will drop it , I wanted to drop the notification sent to him by the exchange when another user logged  in here but due to some privacy purposes I won’t be able drop the image .the story quite funny because the person did p2p and deleted the account to avoid any form of trace,

I know some of us here are still holding some token in some exchanges, but still Dex is more preferable tho. But still am still concern on how the person gain access that easily .

There are are various instances that will make someone keep funds in centralized exchanges. For instance, if the person is a merchant in the P2P section of the exchange, then he will need to have some funds always on the exchange because that is how to run the business. Also if the person is trading in the exchange, that means his trading capital will be in the exchange hence there is every need to take security seriously. Anyone whose account can only be accessed through the email is definitely taking security seriously. There should be multilevel security process to be able to access such account which is safer even though we know that CEX are not completely safe to store funds.

[EarnOnVictor]

No offence, but this story looks cooked up, it never happened! Even if you wanted to cook something like this up, you should have ensured there were no loose ends.

First, perhaps you should include the CEX name so that we tell you the number of verifications that must be enforced before a withdrawal can push through. Aside from the email verification, CEX will require a password from the perpetrator, and this is so important since another gadget is being used to withdraw the funds.

Again, you must pass one or more of these: Facial recognition, Authenticator, SMS, Fingerprint etc. before the withdrawal can be successful.

[Odogwu-Blockchain]

The hacker is not far away from them, I'll tell them to check around them to get the hacker exposed. Normally, hacking cannot be done without the consent of the owner of an account, your friend brother is directly or indirectly connected to this hack activities on his account because he has unknowingly given them access to his email address, password, or 2fa authentication code.

Ask him to keep check his conversation with anyone if he has released these informations to anyone or relatives in anyway.

If he's a newbie trying to chat someone on social media how he can increase the value of his assets, that's when the problem starts, someone might be telling him to submit his details to help him improve on his balance and he can submit them intentionally.

[Sticky Bomb]

No offence, but this story looks cooked up, it never happened! Even if you wanted to cook something like this up, you should have ensured there were no loose ends.

Although the story somehow doesn't look real, but there's some parts that's obtainable in it.

First, perhaps you should include the CEX name so that we tell you the number of verifications that must be enforced before a withdrawal can push through. Aside from the email verification, CEX will require a password from the perpetrator, and this is so important since another gadget is being used to withdraw the funds.

He mentioned that the email was compromised and as long as you've access to an email connected to and exchange account, you can always reset password and gain entry.

Again, you must pass one or more of these: Facial recognition, Authenticator, SMS, Fingerprint etc. before the withdrawal can be successful.

There was only P2P on the account which in some exchanges like Bitget, verification message would just be sent to the email concerned to release funds, again as long as he has access to the corresponding email account linked to the exchange, he can access the authenticator from his end

[CryptopreneurBrainboss]

I know some of us here are still holding some token in some exchanges, but still Dex is more preferable tho. But still am still concern on how the person gain access that easily .

Many of us use repeated passwords for our different accounts and although we're being warned against that still people do it. I remember getting a notification once that my password has been compromised because it was the same password I used for different airdrop sites back in the days when I was hunting airdrops and immediately one site got compromised I was asked to update the password of other sites by chrome and that's when I understood that CEX platforms aren't no go good but we can't avoid them since they're everywhere at our face. Now the only thing you fit do na to take precaution measures so you no go be person wey others go use as lessons. Cex no be where you supposed dey keep coin unless small quantities for trading purpose only.

[EarnOnVictor]

First, perhaps you should include the CEX name so that we tell you the number of verifications that must be enforced before a withdrawal can push through. Aside from the email verification, CEX will require a password from the perpetrator, and this is so important since another gadget is being used to withdraw the funds.

He mentioned that the email was compromised and as long as you've access to an email connected to and exchange account, you can always reset password and gain entry.

That's correct! But that's more reason the system of the exchange will be at a higher alert and ensure you pass at least one more verification before you have access to the account. I've never enabled this verification myself but I was forced to pass them. If you didn't have an authenticator set, what about the fingerprint on the phone? At worst, exchanges will send an SMS to you if you did not set additional verification means. They are smart and I've gone through all that before.

There was only P2P on the account which in some exchanges like Bitget, verification message would just be sent to the email concerned to release funds, again as long as he has access to the corresponding email account linked to the exchange, he can access the authenticator from his end

Hahaha...you make me laugh right now. Did you mean anyone who has access to my email now will definitely have access to my authenticator? Do you think the creator of authenticators and the exchange that suggested it are that dumb?

Well, don't let me sound as if I know everything, I want to learn from you. How is that possible? Please, give a detailed explanation.

[I_Anime]

I know some of us here are still holding some token in some exchanges, but still Dex is more preferable tho. But still am still concern on how the person gain access that easily .

Many of us use repeated passwords for our different accounts and although we're being warned against that still people do it. I remember getting a notification once that my password has been compromised because it was the same password I used for different airdrop sites back in the days when I was hunting airdrops and immediately one site got compromised I was asked to update the password of other sites by chrome and that's when I understood that CEX platforms aren't no go good but we can't avoid them since they're everywhere at our face. Now the only thing you fit do na to take precaution measures so you no go be person wey others go use as lessons. Cex no be where you supposed dey keep coin unless small quantities for trading purpose only.

Exactly CEX should be use for trading or buying of tokens not for holding, so that you won’t fall as victim what safe my friend broda now is that the amount of token in his wallet wasn’t that much was like a little quantity so imagine holding large amount of token things would have been worse then .

Yeah using of repeating password not safe though , but still have it advantages it help to prevent missing up of passwords, but still once that password get compromised there will be an issue , that’s why I also have to stop for security purposes.

[Nwada001]

If the story really happen, how come only email they allowed to use receive code for withdrawal for device way the person just logged in recently, some exchange requires both email and mobile number to be activated before you can run any withdrawal especially when you login from a new device and new location, abi the hacker also get access to those stuffs, Watin happen to authenticator ?

And if such happen nah who they close to them do them that thing which means if them careless enough with there phone same person fit steal from their wallet that one go even they more easier since them fit just use their phone snap the phrase from the other phone go their comfort zone go run am.