move funds to better exchange and always turn 2FA on .
also will suggest you to buy hardware wallet for holding any token .
Topic: Cryptopia hacked (Read 1796 times)
My wallet was stolen! The mood is terrible!
That is why I do not believe Cryptopia, I guess their security sucks, as well as communication and pricing for listing coins. They ask almost same amount as Hitbtc, thought much worse than that exchange
Man, try to use another one next time, here you can't do anything at this point
Man, try to use another one next time, here you can't do anything at this point
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do? 
you should give up it, because you can not do anything if all your account has been hacked. maybe you just have to make the lesson, that later on for the future you have to be careful again. very many victims of victims gang. and my advice if you want to use the market, see first whether the security of the market is high? if not then, use verification via no phone or authenticator. Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
How could that happen, the password in cryptopia was not just numbers and letters only. but must also use some characters.
How can it be hacked, do you not use two factor security ?
Cryptopia has been considered as scam exchange. Their customer support service is horrible. A lot of issue about deposit, withdrawal, and even lost coins as well.
Theres no wonder this exchange is susceptible to hacking.
Theres no wonder this exchange is susceptible to hacking.
Do you have 2fa? Never don't trust Cryptopia and don't keep here a big sums.
Please, don"t put all eggs in one basket, exchange is not a safe place for crypto storage. Don"t ignore 2fa and other ways of protection. Put 2fa on your email, disconnect phone with 2fa from internet, this will be not 100% guarantee but this increase a chance to save money.
My account has been hacked too in cryptopia
I have been a problem with email pincode verification
The mail came with 5 hour too late to logon
So during 15 days it was impossible for me to log on cryotopia
So i've ask them to remove this 2fa by mail
They gave me a 2 fa pincode
And i ve remove this code to put a new pincode
that has work one or two time
After that impossible to connect
The 2 fa code has been changed
And after one week of wait to remove the pincode
I've seen my account was empty
So i loose all this stupid guy has solded 65000 linx at 1090 sat now it's at 1400 and it's just a beginning before 1 may
Just 0.7 bitcoin loosen but it was all my cryptos
Ok
I could have improved my security but think it happened just one week after i 've changed all security code
Because of a problem with pincode by mail
I think it would be better to have several code, one google auth and one for transfers one for each other
And probably several accounts and better some unconnected cold wallet
Today i have 0 btc and 0 cryptos and 0 fiat money
Stay safe
I have been a problem with email pincode verification
The mail came with 5 hour too late to logon
So during 15 days it was impossible for me to log on cryotopia
So i've ask them to remove this 2fa by mail
They gave me a 2 fa pincode
And i ve remove this code to put a new pincode
that has work one or two time
After that impossible to connect
The 2 fa code has been changed
And after one week of wait to remove the pincode
I've seen my account was empty
So i loose all this stupid guy has solded 65000 linx at 1090 sat now it's at 1400 and it's just a beginning before 1 may
Just 0.7 bitcoin loosen but it was all my cryptos
Ok
I could have improved my security but think it happened just one week after i 've changed all security code
Because of a problem with pincode by mail
I think it would be better to have several code, one google auth and one for transfers one for each other
And probably several accounts and better some unconnected cold wallet
Today i have 0 btc and 0 cryptos and 0 fiat money
Stay safe
Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
When was the last time you used antivirus? Maybe you have keylogger and someone catch your emails password. Please help to get my money back from them!
Unfortunately, no one can do anything here. You can open scam accusation if you believe cryptopia has stolen your funds, but honestly, this looks like you were phished or something 
I am using only iPhone always, so its not possible to get my login details as well as gmail account have all security options enabled and there is ony my devices are authorized.
wow... Cryptopia has questionable securities...
It was necessary immediately to think about the security of the account.First of all, mail should be safe 2fa,and also all accounts connected with finances 2fa.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
Hey!
You should write to the support immediatly!
Spread the information about this issue?
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
I don't think you have anything to do than contact the cryptopia and lay a complain to them about this. However, you should also try and find out if you have not expose your password to any one or online which creates opportunity for hackers to hacked your account. Finally hacking in cryptocurrencies is hard for one to recover and I will said that you should focus on the future and how to secure your others account. Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
When was the last time you used antivirus? Maybe you have keylogger and someone catch your emails password. Please help to get my money back from them!
Unfortunately, no one can do anything here. You can open scam accusation if you believe cryptopia has stolen your funds, but honestly, this looks like you were phished or something I am using only iPhone always, so its not possible to get my login details as well as gmail account have all security options enabled and there is ony my devices are authorized.
Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
When was the last time you used antivirus? Maybe you have keylogger and someone catch your emails password. Please help to get my money back from them!
Unfortunately, no one can do anything here. You can open scam accusation if you believe cryptopia has stolen your funds, but honestly, this looks like you were phished or something
Cryptopia withdraw all my BTC balance to another wallet without approval or notification. They don't have any security at all, and this is their sorry message that i gor after a week of asking for support and they simply closed my ticket:
Please help to get my money back from them!
Quote
Thanks for waiting for us to get back to you about this.
I'm sincerely sorry to see this has happened to you. I've completed my investigation into this and can see that your account was actually accessed by another person - IP address 189.40.105.95. This IP address appears to originate from Brazil. We are absolutely certain there have been no user credentials leaked from Cryptopia, and if yours are known to someone else, they must have been obtained from activity or information of your own.
Your account was accessed by this IP address at 3/7/2018 2:40 AM(UTC), and then a minute after that, everything was withdrawn to the address 1HU7vN7dmsX2Et8RjCSwP1dhDyE49emr5k. Unfortunately, this is not a Cryptopia held address so we cannot freeze it to try and recover these funds. As this withdrawal has made it to the blockchain, there isn't anything we're able to do to reverse it, due to the nature of the blockchain itself. You can see this here:
https://blockchain.info/tx/de96cf30119fa3c295fa0794fd6a0036acc6f21479de047d4d04d6f095512558
The withdrawal was also confirmed via an email sent to your registered email address according to our systems, so you should consider that account compromised as well. You may not have received this email if your Withdraw confirmation email had been disabled when you were compromised, then re-enabled afterwards via the Security page at https://www.cryptopia.co.nz/Security.
Unfortunately we’re unable to determine from our end how your email account was compromised, however the most common form we are seeing in these investigations is when the corresponding email address showing up on reported data leaks, and/or is being used for other internet services.
All Cryptopia accounts start with a static 4-8 digit Two Factor PIN number by default, which you set on registration along with your email address and password. This PIN is only a simple form of 2FA, and it’s highly recommended you set up a more secure type of 2FA once you’ve logged into your account. The most secure form of 2FA are dynamic codes, such as Google Authenticator and our Cryptopia Authenticator Device.
From the Security settings for your Account, you can change your 2FA settings of your choice for each activity field on Cryptopia. Please note that you need to remove your current 2FA setting for each activity before you can select and apply other types. 2FA is set for Login as well as a number of other account activities by default: Settings (Security), Lockout, Withdraw, Transfer, and Tip. You will need to enter your 2FA code each time you attempt to access any of these functions while 2FA is applied on them, If you use a static form of 2FA (PIN, Password, Security Question) please set this to something unique you do not use for anything else.
At this stage I recommend changing your email password immediately, It’s very important you use an email provider which supports 2FA on your email account. Please check if your current provider supports 2FA and enable it if so. If your current email provider does not support 2FA, we suggest you look into finding a provider which does support it, and you can then request Cryptopia Support to change your registered email address in a new support ticket. For extra security, we recommend that users of Cryptopia have a dedicated email address that's only used for Cryptopia related activity.
Much of your information, and access to other accounts, can be gained with access to your email account, so please ensure yours is secure.
A number of important emails may be sent from Cryptopia to your registered email address with information relating to activity on your account, such as logins, failed login attempts, withdraw confirmations. They often include links giving you the ability to quickly lock your account for a 24 hour period if you receive notification of activity that wasn’t made by you.
Another important thing to note, is that there are always phishing scams going on which disguise themselves as Cryptopia. We get these taken down as soon as we find them, however I would advise being very vigilant in that regard all the same. I would strongly recommend visiting https://www.cryptopia.co.nz/Forum/Thread/5153, we try and keep this as up to date as possible. This goes into detail about the various scams that we've identified who are pretending to be Cryptopia and provides some examples you can have a look at to determine whether or not your details may have been compromised via one of these sites.
Please use caution to avoid using any unauthorised websites, apps, or search results which impersonate Cryptopia. Your login credentials should NEVER be used anywhere except on our securely signed site with a certificate from Cryptopia LTD [NZ]: https://www.cryptopia.co.nz
I can definitely appreciate that this is not the nicest way to learn about account security, and again, I'm sincerely sorry for your loss.
Kind regards,
Cryptopia Support
I'm sincerely sorry to see this has happened to you. I've completed my investigation into this and can see that your account was actually accessed by another person - IP address 189.40.105.95. This IP address appears to originate from Brazil. We are absolutely certain there have been no user credentials leaked from Cryptopia, and if yours are known to someone else, they must have been obtained from activity or information of your own.
Your account was accessed by this IP address at 3/7/2018 2:40 AM(UTC), and then a minute after that, everything was withdrawn to the address 1HU7vN7dmsX2Et8RjCSwP1dhDyE49emr5k. Unfortunately, this is not a Cryptopia held address so we cannot freeze it to try and recover these funds. As this withdrawal has made it to the blockchain, there isn't anything we're able to do to reverse it, due to the nature of the blockchain itself. You can see this here:
https://blockchain.info/tx/de96cf30119fa3c295fa0794fd6a0036acc6f21479de047d4d04d6f095512558
The withdrawal was also confirmed via an email sent to your registered email address according to our systems, so you should consider that account compromised as well. You may not have received this email if your Withdraw confirmation email had been disabled when you were compromised, then re-enabled afterwards via the Security page at https://www.cryptopia.co.nz/Security.
Unfortunately we’re unable to determine from our end how your email account was compromised, however the most common form we are seeing in these investigations is when the corresponding email address showing up on reported data leaks, and/or is being used for other internet services.
All Cryptopia accounts start with a static 4-8 digit Two Factor PIN number by default, which you set on registration along with your email address and password. This PIN is only a simple form of 2FA, and it’s highly recommended you set up a more secure type of 2FA once you’ve logged into your account. The most secure form of 2FA are dynamic codes, such as Google Authenticator and our Cryptopia Authenticator Device.
From the Security settings for your Account, you can change your 2FA settings of your choice for each activity field on Cryptopia. Please note that you need to remove your current 2FA setting for each activity before you can select and apply other types. 2FA is set for Login as well as a number of other account activities by default: Settings (Security), Lockout, Withdraw, Transfer, and Tip. You will need to enter your 2FA code each time you attempt to access any of these functions while 2FA is applied on them, If you use a static form of 2FA (PIN, Password, Security Question) please set this to something unique you do not use for anything else.
At this stage I recommend changing your email password immediately, It’s very important you use an email provider which supports 2FA on your email account. Please check if your current provider supports 2FA and enable it if so. If your current email provider does not support 2FA, we suggest you look into finding a provider which does support it, and you can then request Cryptopia Support to change your registered email address in a new support ticket. For extra security, we recommend that users of Cryptopia have a dedicated email address that's only used for Cryptopia related activity.
Much of your information, and access to other accounts, can be gained with access to your email account, so please ensure yours is secure.
A number of important emails may be sent from Cryptopia to your registered email address with information relating to activity on your account, such as logins, failed login attempts, withdraw confirmations. They often include links giving you the ability to quickly lock your account for a 24 hour period if you receive notification of activity that wasn’t made by you.
Another important thing to note, is that there are always phishing scams going on which disguise themselves as Cryptopia. We get these taken down as soon as we find them, however I would advise being very vigilant in that regard all the same. I would strongly recommend visiting https://www.cryptopia.co.nz/Forum/Thread/5153, we try and keep this as up to date as possible. This goes into detail about the various scams that we've identified who are pretending to be Cryptopia and provides some examples you can have a look at to determine whether or not your details may have been compromised via one of these sites.
Please use caution to avoid using any unauthorised websites, apps, or search results which impersonate Cryptopia. Your login credentials should NEVER be used anywhere except on our securely signed site with a certificate from Cryptopia LTD [NZ]: https://www.cryptopia.co.nz
I can definitely appreciate that this is not the nicest way to learn about account security, and again, I'm sincerely sorry for your loss.
Kind regards,
Cryptopia Support
Please help to get my money back from them!
If your pin number gets stolen and used to take money from your account at a ATM or EFTPOS machine then whose fault is it:
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
I'm seeing an unactivated 2fa case here for sure. I have never encountered a phishing case that happened on cryptopia or victims claiming that an incident like that happened so I'm very certain that that the user forgot to activate his 2fa security feature.
If your pin number gets stolen and used to take money from your account at a ATM or EFTPOS machine then whose fault is it:
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
1) User whose pin number was insecure ?
2) The bank ?
If people have their accounts accessed it is because they have either:
Used the same username and password on another site that got compromised.
OR
Been victims of a phishing scam
Some of the exchanges have had fake sites set up to look like genuine sites and the fake sites have paid google ads to be at the top of the google searches.
When logging onto any exchange ALWAYS type in the website name and check the security certificate.
Enable 2FA protection on all your accounts INCLUDING your email linked to the account.
Use a different unique email address for every exchange you use.
https://haveibeenpwned.com/ here you can check if your email and details have been subject to a previous hack
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
You can send ticket to support. I don't think we can do much about it.
Over a period of 2 weeks I was receiving emails saying a failed attempt had been made to access my Cryptopia account. Each time it said there had been 2 failures and a third attempt would block my account. I thought they were phishing emails. One week ago I received a message on an exchange to make sure passwords were not the same on both sites. This made me think Cryptopia had been hacked or an attempt made. I did not have any funds in the account. This shows how important it is to use 2FA.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
You scared me , I thought cryptopia has been hacked. The fact is your cryptopia account was hacked.
As trading happened, you can do nothing now . I am sorry to hear that.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
You scared me , I thought cryptopia has been hacked. The fact is your cryptopia account was hacked.
As trading happened, you can do nothing now . I am sorry to hear that.
My Cryptopia hacked on 2.9.2017 too... I lost heaps...
do they from rusia? someone try to hack my cryptopia from IP Rusia lucky for me they cant , after that i activate more security feature
What happened I had Cryptopia device and I set advanced security on withdrawals but not on transfers as I didn't think of that... sadly for me, they came in sold my Signatum, sold my Piecoin and Netko and then transferred BTC to their accounts. everything was done in minutes and my 2.59 BTC were on the run.
After few of my friends received notices of their account being accessed and tried to hack too I believe I have solid rights to believe this was Cryptopia's mistake and I'm very unsatisfied with the service they provided in my case... I didn't get any response for almost 3 days. I'm not happy and am not gonna trade with em again.
Edit: I think I'm gonna visit cops and report the case, just to fulfill my satisfaction and raise concern of security. I also plan to make a youtube/steam video how hack happened and how terrible Cryptopia response was. Simply not good enough... alto I accept it was my false in the first place.
wrong thread "cryptopia hacked"
it is not cryptopia hack it is just your account hack. please don't do this.
it is not cryptopia hack it is just your account hack. please don't do this.
Yes, you are right, when I saw this title, I thought the exchange cryptopia was hacked, after I read this thread, it is just personal account hacked, please modify the title.
i see some people in my country they got failed login in their cryptopia account. but the OP mistake is not enable 2fa. and that is very important to every account that we have. maybe OP can learn from his mistake because when we get hacked we can't do anything especially if the user "kagevu" already withdraw all the coins
my cryptopia account has broken too.
don't use those small exchangers. i will not use it again.
don't use those small exchangers. i will not use it again.
My Cryptopia hacked on 2.9.2017 too... I lost heaps...
do they from rusia? someone try to hack my cryptopia from IP Rusia lucky for me they cant , after that i activate more security feature
My Cryptopia hacked on 2.9.2017 too... I lost heaps...
User accounts have been accessed because other websites have been hacked and the users that have had their accounts hacked are likely to have used the same passwords on the sites that got hacked and did not have 2FA enabled.
It is recommended that you have a unique email address with 2FA enabled just for only one exchange and not for general use. It is also recommended that you use a unique strong password that is not used anywhere else and that 2FA is enabled on your account.
You can check if your email address has been compromised by hacks on other websites. https://haveibeenpwned.com/
It is recommended that you have a unique email address with 2FA enabled just for only one exchange and not for general use. It is also recommended that you use a unique strong password that is not used anywhere else and that 2FA is enabled on your account.
You can check if your email address has been compromised by hacks on other websites. https://haveibeenpwned.com/
Same here, attempted login. Always use 2FA and you should be fine. cryptopia lets you choose security questions too which isnt a bad way of securing your account. If you got your funds stolen, you email may be compromised as well. change passwords everywhere and check to see if you have a keylogger or something on your computer. sorry to hear you got funds stolen.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
Your coins has been sold and stolen already , you can do nothing now . I am sorry to hear that man.Be careful to protect your money . 
Damn, Just yesterday I heard some accounts were hacked on cryptopia. It usually happens when you post your account related information online, like referral links and all.
If someon tries to hack an account with different IP then cryptopia sends an email notification with a link where account can be blocked. I got that and blocked my account immidiately. But now don't know the next step. Asked supporr but only got the answer I could reset my password. But how, when account is blocked?
wrong thread "cryptopia hacked"
it is not cryptopia hack it is just your account hack. please don't do this.
it is not cryptopia hack it is just your account hack. please don't do this.
Yeah my bad i forgot to secure with 2fa because on cryptopia its six different versions of 2fa ... he sold all my coins and transferred himself the bitcoins so i even know his name is kagevu ... already contacted support
sad to say but if he already cash out btc support won't help you and beside its really a big mistake not setting 2fa security code, maybe lessonlearned and it will be a good share from you to aware traders who still trading from cryptopia to be very careful and secured their accounts.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
I'm so sorry for what happened to you.I think there's nothing you can do about it if all of your coins already lost.
Let's make this a lesson, next time use 2FA, different emails and unique password so that your account more secured.
I hope for the best for you, then.
Yeah my bad i forgot to secure with 2fa because on cryptopia its six different versions of 2fa ... he sold all my coins and transferred himself the bitcoins so i even know his name is kagevu ... already contacted support
You need to make a police report too. Legally Cryptopia probably can't do anything, only the courts can prosecute and get your funds back.
(Plus, if they catch him, the police can blacklist him, and prevent this happening to others).
Well I see it very serious matter here, and if the hackers isn't having anonymous it can be easily traced of it's location for further pursuit. The best ways to make it secure is the type of 2Fa for withdrawal protection for the fund as mentioned lately in this thread here. That name who did the hacking can be traced by the police and the path of the network chain has it's record, and I believe even though it's a hard part of the authority at least this can help recover the lost of the victim. All recommendations here can be applicable in the future so that problems like this might be prevented.
Yeah my bad i forgot to secure with 2fa because on cryptopia its six different versions of 2fa ... he sold all my coins and transferred himself the bitcoins so i even know his name is kagevu ... already contacted support
You need to make a police report too. Legally Cryptopia probably can't do anything, only the courts can prosecute and get your funds back.
(Plus, if they catch him, the police can blacklist him, and prevent this happening to others).
yes i usually dont keep my coins at an exchange but in this case i bought xspectre coins and they dont have a good wallet to keep them so i only had the chance to let them sit at the exchange....my bad
It's a bit of a workaround but you could make a new emailadress and new account at every exchange for any trade you make. Coins go in and out once and after that you don't care what happens to the account because you'll never use it again.
I'm sorry for your losses though, please be careful in the future.
I'm sorry for your losses though, please be careful in the future.
Yeah my bad i forgot to secure with 2fa because on cryptopia its six different versions of 2fa ... he sold all my coins and transferred himself the bitcoins so i even know his name is kagevu ... already contacted support
sad to say but if he already cash out btc support won't help you and beside its really a big mistake not setting 2fa security code, maybe lessonlearned and it will be a good share from you to aware traders who still trading from cryptopia to be very careful and secured their accounts.
Yeah my bad i forgot to secure with 2fa because on cryptopia its six different versions of 2fa ... he sold all my coins and transferred himself the bitcoins so i even know his name is kagevu ... already contacted support
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
Why did it happen? What is your email account also hacked? Some of my friends also encountered problems like you and their assets in cryptopia were all stolen. Have you contacted support cryptopia?
I suggest you immediately change your cryptopia account password and your email, you must also use 2fa security to make your account difficult to hacked.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
How could that happen, the password in cryptopia was not just numbers and letters only. but must also use some characters.
How can it be hacked, do you not use two factor security ?
Theirs someone also trying to broke in unto my account but sad to say he did not succeed on his bad attempts since my 2FA is activated and it make me safe for this for a while and I don't know why hacker track my account while im so carefull upon dealing with gmails on some sites when I register and I'm not using the email of my exchange upon signing on bounties or other altcoin and giveaways scene.
So 2FA activation is very advisable so that this hacking issue will not occur again.
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
How could that happen, the password in cryptopia was not just numbers and letters only. but must also use some characters.
How can it be hacked, do you not use two factor security ?
Guys my Cryptopia Account got hacked and all my coins got sold and stolen... by a user called kagevu... what can i do?
Jump to: