Dear Members,
We have recently received user reports regarding a small number of accounts experiencing abnormal logins and unauthorized withdrawal activities. Common attack methods are summarized as follows:
- Hackers gain control of users' computers and infiltrate their registered email accounts to reset platform passwords.
- They attempt to steal verification codes through fake third-party verification interfaces or cloud-synced authenticators to gain control of users' verification codes.
- They withdraw user assets using the compromised platform passwords and verification codes under their control.
To prevent such attacks, we have implemented a security mechanism that prevents withdrawals for 24 hours after password reset, creating a security buffer period for users to prevent malicious asset withdrawals. Additionally, our internal team will continue to strengthen system security mechanisms to protect user assets.
To ensure the security of your assets, please pay attention to whether you receive SMS verification code notifications that you did not initiate, or if there are any suspicious emails regarding MAX password resets or 2FA removal in your inbox. If your phone is lost, your device is infected, or your email is compromised, please immediately contact customer service or freeze your account yourself.
We strongly recommend that you regularly complete the following security checks to ensure account safety:
- Please ensure your email has an independent strong password and enable two-factor authentication (2FA) for the email itself.
- Please disable the built-in cloud sync function in your App Authenticator applications.
- Never share platform passwords, do not enter account credentials on suspicious websites, and do not install applications from unknown sources.
- We recommend using antivirus or anti-malware software to regularly scan your computers and phones to ensure your devices are free from malicious programs.
Thank you for your support.
MAX Digital Asset Exchange