i have gogle authenticator and someone manage to get my coin from your exchange! terrible never will trust anymore your exchange!
Wow, but how is this possible? Of course, I understand that exchange admins can do a lot, but such actions should have their mark on transaction history
they have off course , so how it could be possible to make a transction with a google authentication is something they have to explain to me! i did not lost much but if i have to make a deposit i will never do it again untill i will know how they could take money out with google 2fa authenticator!
Please, contact our support team. I believe they could help you.
Well ,i sent a message to support like you said , i will let you know soon what will be the aswer! Don't fell positive about it anyway! what is upsetting me how could be possibile anyway, move founds from exchange with two differend ip ...mah
But what if user use the VPN? We do not forbid it.
Each new ip address should be confirmed via email address.
User make login attempt, we send the email, that: "There was a login attempt from this IP, please confirm".
After that user can login to his/her account from new IP.
Yes it was long time since did not log into crex, the first attempt i got an email and confirmed, i did buy the coin you just listed yestarday and i left for a couple minute, when i come back to the pc to withrawall the coin to my personal wallet someone manage to sell my coin change in eth and withrawall to their personall eth wallet!
ps this is the email i got from you
Hello
Please activate 2FA on your account and change account and email passwords.
Regards,
Crex24 Support Team
it would be nice to get some more info about this , what i can do if i just receive this advice ?
I can't tell you more, as I do not have the access to the Crex24 DB.
But if "someone" withdrawn coins from your account, he/she has the access to your Email. Perhaps, you use this email address for airdrops or bounty campaigns - which is absolutely unsafe (to provide your email address to anyone in internet).
He/she made withdrawal request and confirmed it via email.
But it is impossible to avoid 2fa if it was turned on at the moment of withdrawal request.
