Topic: Cryptopia Cryptocurrency Platform Services and Development - page 214. (Read 174220 times)

Hello, asking again.

Has there ever been a CEFS payout yet? If so, can you tell what dates because I don't see a payout

Write the node here and i can send them to our devs and admins


Regards  Lafu

Is it in maintenance? Might be getting updated, and you should understand that Cryptopia is a big business so your ticket might have to get read first before anyone can update anything.

Because CoinInfo still shows 0 connections for VIDZ.

How do you know it's being ignored? I'm curious to know

Hello!

There is a status message of PureVIDZ coin:

How do you think I can let you know the nodes? I opened support ticket but it's ignored.

These people offer steady updates and have outlasted many other places. The new look and feel of the website is amazing! Would be cool to see other places and coins offer this level of service for their product

This place seems to be a cool place for a good portion of the community. I'm curious as to why so much fuss is being brought up here? As if a group of people are trying to sabotage the exchange  

The updates to the market are nice. Rock on Cryptopia!

Also, this exchange was very good about verification even though I am from a geographic location that is a problem for some exchanges.

lmfao... thanks for your "expert" advice lol. Did you actually bother to read my prior posts?  If you would have, you would realize that I actually did NONE of the things you mention regarding login faults.  Nothing of mine was compromised and as stated, I actually had a different and unique password set since I wasn't sure of Cryptopia's legitimacy yet (ironic, i know).  I doubt that you know what other exchanges have in place to prevent dumping, and your assertion that it can happen "legitimately" is further proof of that.  In what "legitimate" case does someone sell $1000 in coin they just bought for $30?  Maybe there are 1% chance of a legit reason for this that I cant think of but surely 99%+ of this is used to commit the crime I described.  Again, as stated before I have all options now set with the best 2FA GA.  However the dumping issue aside, the bottom line is that they did not have reasonable login protocols in place and that is how the hackers go into my account, so they are legally culpable for full restitution.  If they really do block acct after 3 failed attempts as you say, then the hackers were somehow able to reset this counter so that they could continue to try after 2 bad attempts. This again would be completely the fault of Cryptopia due to leaving hacking vulnerability in their code to allow said resets.

Yes, definitely support this idea!
Gridcoin is one of my favorite tokens, I plan to buy more Gridcoin and if Cryptopia includes it - that would be great

Also I'm happy to know that Cryptopia will include HST (Decision Token) at the end of a month

If I  want to know and use this platform, then where to start better?

will you be presented on blockshow?

I love to trade at cryptopia.....
It is simple and superb and this is my first Cryptocurrency trading platform.....
I started with this platform from Oct 2017 but it is never given me any error....
The best and easiest trading platform......
Keep your platform always easy to use......
Thanks.....

I also use this exchange since the beginning i really like Cryptopia the team member they work professional,this exchange well have a pretty good vision in the future aside from that we can also earn various cryptocurrency as a rewards for such action we have made.

You say you're not sure what bigger exchanges do to thwart this? I can answer that, nothing. Dumping happens all the time, legitimately. This is not something for the exchange to stop as it is what an exchange is for. For a hacker to get into your account, you did something wrong or had something of yours compromised, whether it is re-using your password elsewhere, getting caught by a phishing scam, left yourself logged in somewhere, had your phone hacked, had someone looking over your shoulder, it is your security that was compromised not the exchange. Cryptopia has more 2FA options than anyone else out there, including on login, that will further protect your account. I suggest you use the options available to you and properly secure your account. Oh, and Cryptopia does appear to lock your account after 3 failed attempts.

Did they fix the problem

You made some fair points and you're somewhat right about the brute force statement.  However, Cryptopia themselves are the ones that notified about the "multiple" attempts. Granted, there is no way for me to know exactly how many "multiple" means, but most certainly in implies more than 3, which should be the floor for beginning of acct locking protocols (as you described above).  Since this clearly was either not in place at all or way too easily circumvented by the hackers, which on it's own is more than sufficient grounds for me being due full restitution from Cryptopia.

Although I have now switched over all 6 types security to Google Auth 2FA, this is still insufficient for the trading/withdrawal loophole I mentioned.  Cryptopia admitted that the 2FA (PIN at the time) had temporarily thwarted the hackers from just sending all of the LTC they accumulated to an external LTC wallet. But, they used the trading loophole that i described to artificially dump an unknown shyt-coin at 3% its cost (to obviously another acct they owned).  So bottom line, if a hacker somehow accesses your account, even their 2FA protocols will not protect from your account be liquidated. This is another huge security gap IMO.  Not sure what the bigger, well-respected exchanges has in place to thwart this but there has to be a way.

I sympathise with you losing your funds, but the whole idea of 2FA is that it proves (at least with high confidence) that you have physical possession of the sole authentication device and therefore you are likely to be the rightful owner of the account. [2FA isn't perfect, of course. Email 2FA is useless if a hacker already controls your email, and SMS 2FA can be captured by porting your phone number to new account.]

A different password for each site will not help if you have something that has logged your keypresses, or nabbed your browser's password file. Anyone who has a copy of your "virtual" credentials can log in, from anywhere in the world. That's what 2FA is intended to prevent.

I do think you have raised a valid point about failed logins. Multiple attempts should lock out the account, temporarily at first, for a longer period each failure, then eventually semi-permanently. It does sound like you may be making some assumptions about brute forcing, though.

This may be somewhat true for some users but I actually had a different PW for my Cryp acct than any other exchange, so this does not apply to me. And as stated, I had 2FA in place for withdrawals but the hackers were still able to circumvent that Cryptopia "protection" by selling off the coin they converted at 3% of cost to obviously another either hacked or legit Cryp account they owned.  Cryp apparently offers NO protection against this type of obviously criminal activity, which is baffling to me because there is nobody on the planet that would sell be legitimately trying to sell what they just bought at 3% the cost.

That aside, the fact that the hackers were even able to log into my acct in the first place after "multiple failed attempts" is ABSOLUTELY the fault of Cryptopia!  Again, almost every site on the planet will lock your acct after 3 failed attempts, but a site where people have a ton of money in coins doesn't offer this basic protection?  Clearly a major fail.  On top of this, my original CT PW was not only different from my other exchange sites but was also unique vs any PW on any other site, period.  I did this because i was unsure of CT (also the reason I only put a few coins here to start, thank god), so there ls literally no way the hackers could have poached my PW from any other site... once again confirming that there had to be multiple attempts in the hundreds or thousands or more before they got in. 

I still have not heard back (3 days now) regarding my request for full restitution. I suppose I have another 4-5 days until they even read the e-mail, given their recent support response history.