Skip to content
Archive

Post

Back to deliverables

xiaomustock
川沐|Trumoo🐮
@xiaomustock

这个gate被盗170万美金现在比较明晰, gate这波公关太抽象。 就是黑客没有掌握用户最新的谷歌验证也没掌握邮箱密码,也不知道手机验证码, 只是一直提交重置申请, 然后gate系统人脸不通过, gate开始给人工手持审核,把假得不能再假的手持给通过了, 黑客借此重置了谷歌验证,重置了邮箱, 添加了白名单地址, 然后最后提笔到从未用过的地址又一次被gate系统拦截, 然后人工审核给依据一份黑客声称的支付宝录屏给通过了, 也就是说gate系统审核中的人脸识别,谷歌验证,邮箱验证全都没通过,gate人工全给黑客的假的不能再假的资料过了。 没立案之前gate嘲讽用户说是用户自己的人脸比对,已经保留了视频和照片。 立案后gate说是他们系统没有保存人脸识别的视频和照片,只给识别结果😂 也就是说全程从头到尾都人脸识别异常,不管是系统还是人工,但最终gate依据支付宝就觉得是本人给过了。 自己的安全项认证全都不信,gate信没有人脸信息的支付宝录屏? gate是不是提前声明了支付宝能作为你gate账户资产安全项的审核依据? 那别人币安或者okx或者信用卡被盗是不是录个屏就能顺手盗你gate用户资产?因为看起来币安@binance 和 @okx 确实比gate安全点。就像支付宝在gate认知里比gate安全一样。

photo
@

1/10 170万美元在gete平台被盗-回答几个大家关心的问题: 第一,Gate账户原绑定的邮箱、手机短信和Google验证器均未泄露; 第二,常用支付宝未被盗,但有一个闲置的支付宝被登录且我不知情; 第三,Gate多次公开回应前后矛盾,欺骗公众,混淆事实; 第四,Gate在警方面前误导侦查,妨碍司法公正,藐视司法权威; 第五,攻击者为何掌握如此详细的账户信息(gate有内鬼)? 第六,Gate 声称配合警方,线索在哪里? 具体详情请看下面的线程(一共十条推文):

· 132K Views

40 Reposts 16 Quotes 438 Likes 58 Bookmarks
replies reposts likes
24 replies collected of 35 X reports
阿台🕊️ @QT9277 · 36K

@xiaomustock gate This round of censorship is even more abstract than hacking!

original · zh

@xiaomustock gate 这波审核比黑客还抽象啊

2
土哥爱币股 @tmingplus ·

@xiaomustock I hadn't found this part yet, you're so observant!

original · zh

@xiaomustock 我还没发现有这个部分,果然还是你细

8
BTCD @BTCD_BTC ·

@xiaomustock The manual review process has let fake handholding slip through; this risk control system looks really risky.

original · zh

@xiaomustock 人工审核把假手持都放过了,这套风控看着真悬。

8
Inspector Puluo @Master11959 ·

@xiaomustock Even fake hands can pass the review, is Gate's manual review a freebie?

original · zh

@xiaomustock 假手持都能过审,Gate这个人工审核是充话费送的吧?

5
Jude Y @ying344703 ·

Now that Mr. Han has stepped in and sent a lawyer, he'll probably try to use his connections to work with the police. It's still possible they still won't compensate; if they did, they'd be admitting their own loopholes. I think the lawyer's current work is simply to shift the focus to the fact that the user's Alipay account was stolen, guiding the police to investigate the theft of Alipay information, ostensibly to track down the hacker. In reality, those in the exchange know perfectly well that the money is definitely gone. So this whole affair reflects Gate's attitude from beginning to end; anyone facing a problem in the future will be treated the same way.

original · zh

现在韩老板出面,派了个律师,估计也会找点关系去警方那边做工作了。有可能还是不会赔,赔了就承认自己的漏洞了。现在派律师去做的工作,我认为也就是把方向转移到是用户自己的支付宝被别人盗了,这个的确是事实,在引导警方把重点转移到支付宝信息被盗的追查,再美其名曰的去追踪黑客。实际上干交易所的怎么不知道,这钱肯定是拿不回来了。所以这事从头到尾体现了Gate的态度,任何一个人以后遇到问题,都会被这样对待

1 66
我跟你说不清楚 @nononosaysomuch ·

@xiaomustock gate: "The person reviewing the application was an intern, who has since been dismissed."

original · zh

@xiaomustock gate:"审核的是实习生,现已辞退"

1 4
🫂大橋頭安公子 @ananluluanan · 17K

@xiaomustock 駭客長得不像自己 解鎖

Trading雷叔 @Ray_Lei_Crypto ·

@xiaomustock Is Gate a shady platform? It doesn't seem so, considering it's stood the test of time for so many years. But why does it operate so shadyly? It's actually quite simple: this world is a far more unpredictable, makeshift operation than you can imagine. Extreme scenarios can be astonishing, like Hynix suddenly dropping 75%, or the days when counterfeit stocks dropped 90% and then continued to fall another 90%. What can we do? We can only choose the least shady platform and be prepared to deal with any unexpected events.

original · zh

@xiaomustock Gate算是野鸡平台么? 似乎也不算,毕竟那么多年屹立不倒。 但是为何操作这么野鸡呢? 其实挺简单,这世界就是一个超乎想象的草台班子。极端场景发生时令人瞠目结舌,就像海力士一眨眼跌75%,就像当年山寨跌了90%以后继续90% 我们能什么呢?只能选择最最最不草台的,然后随时准备应对意外

2

@xiaomustock But Gate just won't admit that it has a problem.

original · zh

@xiaomustock 但是 Gate 就是不会承认自己有问题

3
daniel @daniel_praguepp ·

@xiaomustock Social engineering, hacking has many methods.

original · zh

@xiaomustock 社会工学,黑客的方法很多。

灯王 @dwMinima ·

@xiaomustock One of the best USB flash drives: x.com/i/status/208370918481483…

original · ja

@xiaomustock 最好用的 U 卡之一 https://x.com/i/status/2083709184814834091

1 1
周孟海 @hang_zhou84847 ·

@xiaomustock After reading this, I feel that: Gate's system has problems They don't acknowledge the issue and have no money to compensate Or 1.7 million yuan is a huge burden for them.

original · zh

@xiaomustock 看完感觉 gate系统有问题 不认且没有钱赔 或者170万wu对它来说压力很大

10
Lydia @0x_lydia ·

@xiaomustock After seeing all those sarcastic and inflammatory comments from users, my impression of Gate.io plummeted.

original · zh

@xiaomustock 前面集体阴阳用户,我对gate的印象就跌入谷底了。

23
Hogen @0xHogen ·

@xiaomustock I finally understand, the summary is very good.

original · zh

@xiaomustock 终于看懂了 总结的很好

2
Lawvin @lawvinx ·

@xiaomustock, you've already been put on hold; admitting this mistake might lead to your bankruptcy.

original · zh

@xiaomustock 说好了 被架起来了 如果承认这个错误 可能会直接倒闭

1
辰逸 @bqbty666 ·

@xiaomustock has terrible public relations skills.

original · zh

@xiaomustock 太不会公关处理了。

专业捡垃圾 @cellmejiwa ·

@xiaomustock The correct course of action for Gate users now is: withdraw your money first, then watch the drama unfold.

original · zh

@xiaomustock Gate用户现在正确的的做法是: 先提钱,再吃瓜

13
汉堡哥 @ggman123452 ·

@xiaomustock's statements before and after the case was filed are directly contradictory. They previously mocked the user for having their own facial comparison and video recording, but later claimed they hadn't saved it. This kind of public relations only makes people less credible.

original · zh

@xiaomustock 立案前后说法直接矛盾,之前嘲讽用户自己人脸比对还留了视频,后来又说没保存,这种公关只能让人更不信。

1
DeFi小矿工 @DeFi8362 · 73K

@xiaomustock Good summary

original · zh

@xiaomustock 好总结

John @0xxsmart · 14K

@xiaomustock @cryptowilson_ Now you understand!

original · ja

@xiaomustock @cryptowilson_ 这下吃明白了

断浪 WaveKing @waveking1314 · 70K

@xiaomustock If the police ultimately confirm that this is indeed the process, manual verification essentially bypasses all security measures. Resetting the authenticator, changing the email address, adding someone to the whitelist, and moving to a new address should at least include a cooling-off period and a second verification using the original device.

original · zh

@xiaomustock 如果警方最后确认流程确实如此,人工审核等于把所有安全项一把绕开了。重置验证器、改邮箱、加白名单、提到新地址,至少该有冷静期和原设备二次确认。

1
Jude Y @ying344703 ·

@xiaomustock Now Gate is insisting that the Alipay screen recording is real, that hackers stole the user's information, and therefore the customer deserves it. They completely ignore the issue of facial recognition and the handheld photo fooling their review process. Their answer is that the similarity is so high that even the police couldn't tell the difference, so they have no problem.

original · zh

@xiaomustock 结果现在gate就抓着这个支付宝录屏是真的,是黑客盗了用户的,所以客户自己活该。丝毫不提人脸识别和手持照片骗过了他们的审核的问题。回答是高度相似,相似到连警方都辨认不出来,所以他们没问题

2
海哥缠论 @haigechanlun666 · 14K

@xiaomustock I understand

original · ja

@xiaomustock 看懂了

1
默默Kong(满血版) @KongEzza805 · 286K

@xiaomustock After seeing all those sarcastic and accusatory comments from users, my impression of Gate.io has plummeted.

original · zh

@xiaomustock 前面集体阴阳用户,我对gate的印象就跌入谷底了

1 replies whose parent comment X withheld

橘皮乌龙||Leo @ZLiao3 ·

@0XTerryss @xiaomustock ... Oops, I think I've actually used this method before. I did it this way when I was helping a girl check her bank card binding.

original · zh

@0XTerryss @xiaomustock 。。。坏了这个路径我好像还真实践过,帮妹子检查银行卡绑定的时候我也是这么走的

1

These were collected in full; the comment they answer was not returned by X.