A forum member alertoriole claims to have had his Stake account hacked and the hackers stole 165k in USDT from him. That's obviously not your fault, and you can't be blamed for players not securing their accounts.
However, the player claims that the 2FA on Stake can be deactivated without requiring the person to input a 2FA code to confirm the deactivation. Is that true and why is that possible in the first place? Can other Stake players confirm if that's true or not? Not only that, but the player's money was allegedly sent to other accounts in the form of tips. We are talking about tens of thousands of dollars. How can it be that such transactions don't sound any alarms on your end and you don't investigate what's going on?
The topic in question is Hacked for 165k STAKE.COM.
Any official stance from Stake and their team on all this?
to confirm, they have updated it a day after my money was stolen, they now send an email when 2fa is deactivated. Doesn't help me or anyone stolen from before but I guess it makes it harder for future theft.
I have not tested it yet, but do you know if they have checks in place to change your email address? It happens that people switch from one email provider to the next, so I reckon Stake has some serious verification in place to stop someone from changing the email address... right?
I have to give credit..where it is due.... Stake reacted very quickly when this exploit was exposed, so it is a thumbs up from me for that. (You will see that I suggested a similar email verification here https://bitcointalksearch.org/topic/diamond-5-stake-account-was-hacked-5440588) .... but unfortunately it was too late for you.