move funds to better exchange and always turn 2FA on .
also will suggest you to buy hardware wallet for holding any token .
Topic: Cryptopia hacked (Read 1737 times)
My wallet was stolen! The mood is terrible!
That is why I do not believe Cryptopia, I guess their security sucks, as well as communication and pricing for listing coins. They ask almost same amount as Hitbtc, thought much worse than that exchange
Man, try to use another one next time, here you can't do anything at this point
Man, try to use another one next time, here you can't do anything at this point
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do? 
you should give up it, because you can not do anything if all your account has been hacked. maybe you just have to make the lesson, that later on for the future you have to be careful again. very many victims of victims gang. and my advice if you want to use the market, see first whether the security of the market is high? if not then, use verification via no phone or authenticator. Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
How could that happen, the password in cryptopia was not just numbers and letters only. but must also use some characters.
How can it be hacked, do you not use two factor security ?
Cryptopia has been considered as scam exchange. Their customer support service is horrible. A lot of issue about deposit, withdrawal, and even lost coins as well.
Theres no wonder this exchange is susceptible to hacking.
Theres no wonder this exchange is susceptible to hacking.
Do you have 2fa? Never don't trust Cryptopia and don't keep here a big sums.
Please, don"t put all eggs in one basket, exchange is not a safe place for crypto storage. Don"t ignore 2fa and other ways of protection. Put 2fa on your email, disconnect phone with 2fa from internet, this will be not 100% guarantee but this increase a chance to save money.
My account has been hacked too in cryptopia
I have been a problem with email pincode verification
The mail came with 5 hour too late to logon
So during 15 days it was impossible for me to log on cryotopia
So i've ask them to remove this 2fa by mail
They gave me a 2 fa pincode
And i ve remove this code to put a new pincode
that has work one or two time
After that impossible to connect
The 2 fa code has been changed
And after one week of wait to remove the pincode
I've seen my account was empty
So i loose all this stupid guy has solded 65000 linx at 1090 sat now it's at 1400 and it's just a beginning before 1 may
Just 0.7 bitcoin loosen but it was all my cryptos
Ok
I could have improved my security but think it happened just one week after i 've changed all security code
Because of a problem with pincode by mail
I think it would be better to have several code, one google auth and one for transfers one for each other
And probably several accounts and better some unconnected cold wallet
Today i have 0 btc and 0 cryptos and 0 fiat money
Stay safe
I have been a problem with email pincode verification
The mail came with 5 hour too late to logon
So during 15 days it was impossible for me to log on cryotopia
So i've ask them to remove this 2fa by mail
They gave me a 2 fa pincode
And i ve remove this code to put a new pincode
that has work one or two time
After that impossible to connect
The 2 fa code has been changed
And after one week of wait to remove the pincode
I've seen my account was empty
So i loose all this stupid guy has solded 65000 linx at 1090 sat now it's at 1400 and it's just a beginning before 1 may
Just 0.7 bitcoin loosen but it was all my cryptos
Ok
I could have improved my security but think it happened just one week after i 've changed all security code
Because of a problem with pincode by mail
I think it would be better to have several code, one google auth and one for transfers one for each other
And probably several accounts and better some unconnected cold wallet
Today i have 0 btc and 0 cryptos and 0 fiat money
Stay safe
Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
When was the last time you used antivirus? Maybe you have keylogger and someone catch your emails password. Please help to get my money back from them!
Unfortunately, no one can do anything here. You can open scam accusation if you believe cryptopia has stolen your funds, but honestly, this looks like you were phished or something 
I am using only iPhone always, so its not possible to get my login details as well as gmail account have all security options enabled and there is ony my devices are authorized.
wow... Cryptopia has questionable securities...
It was necessary immediately to think about the security of the account.First of all, mail should be safe 2fa,and also all accounts connected with finances 2fa.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
Hey!
You should write to the support immediatly!
Spread the information about this issue?
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
I don't think you have anything to do than contact the cryptopia and lay a complain to them about this. However, you should also try and find out if you have not expose your password to any one or online which creates opportunity for hackers to hacked your account. Finally hacking in cryptocurrencies is hard for one to recover and I will said that you should focus on the future and how to secure your others account. Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
When was the last time you used antivirus? Maybe you have keylogger and someone catch your emails password. Please help to get my money back from them!
Unfortunately, no one can do anything here. You can open scam accusation if you believe cryptopia has stolen your funds, but honestly, this looks like you were phished or something I am using only iPhone always, so its not possible to get my login details as well as gmail account have all security options enabled and there is ony my devices are authorized.
Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
When was the last time you used antivirus? Maybe you have keylogger and someone catch your emails password. Please help to get my money back from them!
Unfortunately, no one can do anything here. You can open scam accusation if you believe cryptopia has stolen your funds, but honestly, this looks like you were phished or something
Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
Please help to get my money back from them!
Quote
Thanks for waiting for us to get back to you about this.
I'm sincerely sorry to see this has happened to you. I've completed my investigation into this and can see that your account was actually accessed by another person - IP address 189.40.105.95. This IP address appears to originate from Brazil. We are absolutely certain there have been no user credentials leaked from Cryptopia, and if yours are known to someone else, they must have been obtained from activity or information of your own.
Your account was accessed by this IP address at 3/7/2018 2:40 AM(UTC), and then a minute after that, everything was withdrawn to the address 1HU7vN7dmsX2Et8RjCSwP1dhDyE49emr5k. Unfortunately, this is not a Cryptopia held address so we cannot freeze it to try and recover these funds. As this withdrawal has made it to the blockchain, there isn't anything we're able to do to reverse it, due to the nature of the blockchain itself. You can see this here:
https://blockchain.info/tx/de96cf30119fa3c295fa0794fd6a0036acc6f21479de047d4d04d6f095512558
The withdrawal was also confirmed via an email sent to your registered email address according to our systems, so you should consider that account compromised as well. You may not have received this email if your Withdraw confirmation email had been disabled when you were compromised, then re-enabled afterwards via the Security page at https://www.cryptopia.co.nz/Security.
Unfortunately we’re unable to determine from our end how your email account was compromised, however the most common form we are seeing in these investigations is when the corresponding email address showing up on reported data leaks, and/or is being used for other internet services.
All Cryptopia accounts start with a static 4-8 digit Two Factor PIN number by default, which you set on registration along with your email address and password. This PIN is only a simple form of 2FA, and it’s highly recommended you set up a more secure type of 2FA once you’ve logged into your account. The most secure form of 2FA are dynamic codes, such as Google Authenticator and our Cryptopia Authenticator Device.
From the Security settings for your Account, you can change your 2FA settings of your choice for each activity field on Cryptopia. Please note that you need to remove your current 2FA setting for each activity before you can select and apply other types. 2FA is set for Login as well as a number of other account activities by default: Settings (Security), Lockout, Withdraw, Transfer, and Tip. You will need to enter your 2FA code each time you attempt to access any of these functions while 2FA is applied on them, If you use a static form of 2FA (PIN, Password, Security Question) please set this to something unique you do not use for anything else.
At this stage I recommend changing your email password immediately, It’s very important you use an email provider which supports 2FA on your email account. Please check if your current provider supports 2FA and enable it if so. If your current email provider does not support 2FA, we suggest you look into finding a provider which does support it, and you can then request Cryptopia Support to change your registered email address in a new support ticket. For extra security, we recommend that users of Cryptopia have a dedicated email address that's only used for Cryptopia related activity.
Much of your information, and access to other accounts, can be gained with access to your email account, so please ensure yours is secure.
A number of important emails may be sent from Cryptopia to your registered email address with information relating to activity on your account, such as logins, failed login attempts, withdraw confirmations. They often include links giving you the ability to quickly lock your account for a 24 hour period if you receive notification of activity that wasn’t made by you.
Another important thing to note, is that there are always phishing scams going on which disguise themselves as Cryptopia. We get these taken down as soon as we find them, however I would advise being very vigilant in that regard all the same. I would strongly recommend visiting https://www.cryptopia.co.nz/Forum/Thread/5153, we try and keep this as up to date as possible. This goes into detail about the various scams that we've identified who are pretending to be Cryptopia and provides some examples you can have a look at to determine whether or not your details may have been compromised via one of these sites.
Please use caution to avoid using any unauthorised websites, apps, or search results which impersonate Cryptopia. Your login credentials should NEVER be used anywhere except on our securely signed site with a certificate from Cryptopia LTD [NZ]: https://www.cryptopia.co.nz
I can definitely appreciate that this is not the nicest way to learn about account security, and again, I'm sincerely sorry for your loss.
Kind regards,
Cryptopia Support
I'm sincerely sorry to see this has happened to you. I've completed my investigation into this and can see that your account was actually accessed by another person - IP address 189.40.105.95. This IP address appears to originate from Brazil. We are absolutely certain there have been no user credentials leaked from Cryptopia, and if yours are known to someone else, they must have been obtained from activity or information of your own.
Your account was accessed by this IP address at 3/7/2018 2:40 AM(UTC), and then a minute after that, everything was withdrawn to the address 1HU7vN7dmsX2Et8RjCSwP1dhDyE49emr5k. Unfortunately, this is not a Cryptopia held address so we cannot freeze it to try and recover these funds. As this withdrawal has made it to the blockchain, there isn't anything we're able to do to reverse it, due to the nature of the blockchain itself. You can see this here:
https://blockchain.info/tx/de96cf30119fa3c295fa0794fd6a0036acc6f21479de047d4d04d6f095512558
The withdrawal was also confirmed via an email sent to your registered email address according to our systems, so you should consider that account compromised as well. You may not have received this email if your Withdraw confirmation email had been disabled when you were compromised, then re-enabled afterwards via the Security page at https://www.cryptopia.co.nz/Security.
Unfortunately we’re unable to determine from our end how your email account was compromised, however the most common form we are seeing in these investigations is when the corresponding email address showing up on reported data leaks, and/or is being used for other internet services.
All Cryptopia accounts start with a static 4-8 digit Two Factor PIN number by default, which you set on registration along with your email address and password. This PIN is only a simple form of 2FA, and it’s highly recommended you set up a more secure type of 2FA once you’ve logged into your account. The most secure form of 2FA are dynamic codes, such as Google Authenticator and our Cryptopia Authenticator Device.
From the Security settings for your Account, you can change your 2FA settings of your choice for each activity field on Cryptopia. Please note that you need to remove your current 2FA setting for each activity before you can select and apply other types. 2FA is set for Login as well as a number of other account activities by default: Settings (Security), Lockout, Withdraw, Transfer, and Tip. You will need to enter your 2FA code each time you attempt to access any of these functions while 2FA is applied on them, If you use a static form of 2FA (PIN, Password, Security Question) please set this to something unique you do not use for anything else.
At this stage I recommend changing your email password immediately, It’s very important you use an email provider which supports 2FA on your email account. Please check if your current provider supports 2FA and enable it if so. If your current email provider does not support 2FA, we suggest you look into finding a provider which does support it, and you can then request Cryptopia Support to change your registered email address in a new support ticket. For extra security, we recommend that users of Cryptopia have a dedicated email address that's only used for Cryptopia related activity.
Much of your information, and access to other accounts, can be gained with access to your email account, so please ensure yours is secure.
A number of important emails may be sent from Cryptopia to your registered email address with information relating to activity on your account, such as logins, failed login attempts, withdraw confirmations. They often include links giving you the ability to quickly lock your account for a 24 hour period if you receive notification of activity that wasn’t made by you.
Another important thing to note, is that there are always phishing scams going on which disguise themselves as Cryptopia. We get these taken down as soon as we find them, however I would advise being very vigilant in that regard all the same. I would strongly recommend visiting https://www.cryptopia.co.nz/Forum/Thread/5153, we try and keep this as up to date as possible. This goes into detail about the various scams that we've identified who are pretending to be Cryptopia and provides some examples you can have a look at to determine whether or not your details may have been compromised via one of these sites.
Please use caution to avoid using any unauthorised websites, apps, or search results which impersonate Cryptopia. Your login credentials should NEVER be used anywhere except on our securely signed site with a certificate from Cryptopia LTD [NZ]: https://www.cryptopia.co.nz
I can definitely appreciate that this is not the nicest way to learn about account security, and again, I'm sincerely sorry for your loss.
Kind regards,
Cryptopia Support
Please help to get my money back from them!
If your pin number gets stolen and used to take money from your account at a ATM or EFTPOS machine then whose fault is it:
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
I'm seeing an unactivated 2fa case here for sure. I have never encountered a phishing case that happened on cryptopia or victims claiming that an incident like that happened so I'm very certain that that the user forgot to activate his 2fa security feature.
If your pin number gets stolen and used to take money from your account at a ATM or EFTPOS machine then whose fault is it:
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
You can send ticket to support. I don't think we can do much about it.
Jump to: