Talking with Inception.
The guy that withdrew my KDC is from the Philippines, he's been on 10(!!!) accounts. I guess atleast 9 of those aren't his.
DO NOT KEEP YOUR COINS AT COINMARKET.IO FOR NOW! Withdraw them to your wallet until they've added an authenticator.
I did not have an easy password, no one has ever figured it out before and the chance that I've gotten a keylogger that 9 other that uses coinmarket.io has is not high. So probably he hacked coinmarket.io somehow and got some account info!
But please, don't stop using coinmarket.io, they're doing a great work.
Btw, the IP is 180.190.227.223
How the hell do you cancel your orders? I can't withdraw.
Scroll down the page and its just above the market history
As Sparkzor said, don't stop trading however ensure you are using a unique password, maybe even change it now. Also withdraw any inactive balances and only keep a small amount there at a time, withdraw/deposits are very quick anyways
Talking with Inception.
The guy that withdrew my KDC is from the Philippines, he's been on 10(!!!) accounts. I guess atleast 9 of those aren't his.
DO NOT KEEP YOUR COINS AT COINMARKET.IO FOR NOW! Withdraw them to your wallet until they've added an authenticator.
I did not have an easy password, no one has ever figured it out before and the chance that I've gotten a keylogger that 9 other that uses coinmarket.io has is not high. So probably he hacked coinmarket.io somehow and got some account info!
But please, don't stop using coinmarket.io, they're doing a great work.
Btw, the IP is 180.190.227.223
You definitely haven't used the same user/pass on a mining pool? If yes please can you pm me which pools you have used?
We'd like to do what we can to limit any damage that could possibly be done if this is something bigger.
I'm not sure, the passwords I use are pretty advanced and I have several version of them with more and less numbers etc. But it's possible.
Coinarmy, hashwithme, dedicatedpool, hackshardgaming eh.. hm... and one more. But haven't used the same password on all of them either.
Okay and you definitely didn't use xtra pools at any point? As they are known to remove the MD5 hash & salt from user passes so they can then use them to access users accounts elsewhere.
** This is by no means a confirmed flaw in coinmarket, it could easily be someone using details harvested from a pool that purposly removed MD5 password hashing/salting to steal your passwords.**