Warning!!! Check your pool cash out address
my cash out address at http://vert.bitcrush.info/ was just changed by someone about one hour ago, all my coins in the pool was cash out by someone.
Don´t use same user and pass on different pools
Yes I used different password on different pools
But used only one email address.
maybe some security issue with the frontend or just brute force.
is see bitcrush has now enabled 2Fa i hope more pool admins will do this!
message on the pool site:
"Enabled 2FA, posted Feb 6, 2014 at 05:16 by MonoKaskade
Some payout addresses got changed. This happened on a lot of pools over the last few weeks.
There were several accounts (50+) using the same payout address. I've reset all of those addresses. Please add a new address if you are affected.
I’d advise using passwords you never use for anything else!
In order to enhance security I enabled 2FA (email confirmation) to change account details.
I also enforce a password minimum length of 12 characters containing at least on of the following characters: a-z, A-Z and 0-9
I also enabled mandatory https."
I should mention that heavy industries has always had 2fa enabled.