Gate News reports that on March 19, a subdomain page of a certain CEX Commerce displayed a prompt for users to input their wallet seed phrases, attracting the attention of security researchers. SlowMist’s Yu Xian stated that they cannot understand why the exchange would set up such a page, which directly asks users to enter seed phrases in plain text for asset recovery, considering it a serious security risk. On-chain analyst ZachXBT pointed out that this page was once referenced in a help document for a CEX Commerce product, which advised users to recover funds by importing seed phrases into a compatible wallet such as CEX Wallet or MetaMask, with a link to the withdrawal tool on that subdomain. The help document has since been removed. ZachXBT also noted that if malicious actors exploit this page, it could facilitate social engineering attacks on the exchange’s users.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
French Authorities Boost Security for Crypto Executives Amid Kidnapping Threats
French authorities are enhancing security for digital-asset executives and investors due to recent kidnappings. Following these threats, police escorted Paris Blockchain Week attendees, and protective measures for crypto holders are being developed.
GateNews2h ago
Zonda Exchange Discloses 4,500 BTC Cold Wallet as Private Keys Remain Untransferred
Zonda, a Polish crypto exchange, revealed a cold wallet with 4,503 BTC amid a withdrawal crisis. CEO Przemysław Kral addressed fund misappropriation allegations and promised legal action against false claims, emphasizing that private keys were never transferred due to the former CEO's disappearance.
GateNews3h ago
The OneCoin Ponzi scheme begins restitution, with the U.S. Department of Justice setting aside $40 million to compensate victims
The OneCoin Ponzi scheme was founded by Ruja Ignatova in 2014, attracting 3.5 million investors and scamming about $4 billion. The U.S. Department of Justice will provide $40 million in compensation for victims, the founder has gone missing, is listed as the FBI’s No. 1 most-wanted fugitive, and the case has prompted cooperation among law enforcement agencies worldwide, resulting in sanctions against several co-conspirators.
ChainNewsAbmedia3h ago
Rhea Finance Suffers Attack, Loses Approximately $7.6M
Rhea Finance experienced a security breach where an attacker created fake token contracts and manipulated liquidity pools, misleading the oracle system and extracting at least $7.6 million in assets.
GateNews4h ago
Ukraine Dismantles International Cybercrime Ring, Seizes $3M in Cryptocurrency
A suspect connected to an international cybercriminal group was arrested in Ukraine for $100 million in fraud and money laundering. Police seized $11 million in assets and $3 million in cryptocurrency. The suspect faces charges for document forgery and money laundering.
GateNews6h ago
DeFi Sector Faces Multiple Pressures as Yields Fall and $285M Hack Raises Security Concerns
Decentralized finance (DeFi) is under pressure as lending yields drop to levels similar to traditional bonds, blockchain activity declines, and a significant hack raises security concerns, challenging claims of institutional-grade safety.
GateNews6h ago
