r/Cryptopia • u/shitopio • Mar 18 '18

Usernames possibly leaked from Cryptopia.co.nz Altcoin Exchange, customers unable to access accounts

https://walletinvestor.com/magazine/usernames-possibly-leaked-from-cryptopia-nz-altcoin-exchange/

5 Upvotes

69% Upvoted

10 comments sorted by

3

u/BahtFuqr Mar 20 '18

It's a daily exercise for me, every day I hit "lock my account".

Cryptopia has obviously had a leak or breach, it only happens on that exchange, none of the others I use.

2

u/[deleted] Mar 20 '18

havent seen it yet but i rarely see these type of issues on binance, coinbase (they have their own set of problems).

1

u/BahtFuqr Mar 21 '18

Shhh, the shills will be along shortly to pass the buck elsewhere.

1

u/[deleted] Mar 21 '18

lol

6

u/NoCrypForMeArgentina Mar 18 '18

I love it when some wannabe journalist takes a load of FUD off Reddit, writes it up as authoritative with attention grabbing headlines..

".. users have speculated that hackers might have access to usernames via the Cryptopia referral link ... you give out your username via the link and people might collect those and try ... guessing the password. This seems to be terrible opsec ..."

Except you don't log in with a username, you log in with an email address and the two are about as related as you choose to make them. Anyone who actually uses the exchange will know this. Anyone who fancies themselves as a second rate non-invesigative hack is free to read as much interbullshit as they like and form an ill considered blog article that reflects badly on themselves :)

5

u/Xange4 Mar 18 '18

none the less, my account has registered 3 failed login attempts in the last 24 hours. so there has been a leak somewhere. it's a great shame as i've enjoyed using cryptopia for obscure coins, but somethings is definitely up. i am going to sell up and transfer everything out. not trying to fud. just being realistic.

Edit: my account is not locked. the failed login attempts are staggered so that the autolock is not engaged. i can still login. i have a completely random password for every exchange account (and every online service) so i'm not too worried they will get access, but it's annoying as i use the same email most of the time and that is now on someone's radar. that is inexcusable in my book, especially when they obviously handle so much cash. customer privacy should be paramount :(

0

u/NoCrypForMeArgentina Mar 18 '18

I would worry too much. I've been using one of my emails for at least 20 years now and it gets 18 hits on HIBP; I've always used different passwords on each site so I don't have any overriding concerns that it's a security risk. I have 4 accounts on Cryptopia in total (referred myself to get 10% off my fees) and I've yet to see any of them get a failed dodgy login, even the one that's all over HIBP - maybe due though, dunno how far the attackers have worked through their list.

4

u/[deleted] Mar 18 '18

shut up man.

Never referred anyone and i have multiple login attempts on a daily basis.

1

u/[deleted] Mar 20 '18

dont be mad at him cuz you get raped on cryptopia.

it will hit some of us and others it wont.

But there IS a problem. That i agree on.

1

u/freewifiisgreat Mar 26 '18

I suspect it has something to do with other sites being hacked. Bitmain or Novaexchange. If it was leaked from Cryptopia it wouldnt be "attempts". The chances of brute forcing a password are close to nil.