Všechna oznámení: Poslední novinky z burzy MEXC

<div><div class="ace-line ace-line old-record-id-PMKFdrHLYoBAT4xQPY4uoCRCsBe">The MEXC Security Team is aware of recent online reports concerning malicious software packages that impersonate cryptocurrency exchange SDKs on third-party platforms. We understand that some online discussions have linked this industry-wide issue to MEXC, and we want to provide a clear and transparent clarification to our valued users.</div><div class="ace-line ace-line old-record-id-YQhCdvbxxo6mg4xXVkkuaNqdsvc"> </div><ol start="1" class="list-number1"><li class="ace-line ace-line old-record-id-Rs4jdlgQeoBWghxfM5ku2i3Asnd"><div>This is an industry-wide phishing-style supply chain attack</div></li></ol><div class="ace-line ace-line old-record-id-UcOWdk1LjonpEAxPgoYuu1e4sVb"> </div><div class="ace-line ace-line old-record-id-ZdkEdFVJeoEUNcx7X7Lu3Jros7c">The malicious package is an example of a common tactic used by threat actors targeting the Web3 ecosystem. These attackers impersonate legitimate SDKs of well-known exchanges and publish these counterfeit packages on unofficial platforms such as PyPI and other code repositories. Their goal is to deceive developers into installing them and submitting API credentials, which are then abused to access or transfer assets without authorization. This method is similar in principle to phishing websites.</div><div class="ace-line ace-line old-record-id-IgZId51iioKOdbxvz50uXR0sswf"> </div><div class="ace-line ace-line old-record-id-DOGAdZlyzogSqEx3rwOuXSyysMg">For a more comprehensive understanding of phishing tactics, we encourage you to read our dedicated article here: <a href="https://www.mexc.com/learn/article/17827791518952">https://www.mexc.com/learn/article/17827791518952</a></div><div class="ace-line ace-line old-record-id-PTw2dYKrIomim5xIwQIuqGG0sQd"> </div><div class="ace-line ace-line old-record-id-S0FTdmpAHovSdPx39JYuIWj6syb"> </div><ol start="2" class="list-number1"><li class="ace-line ace-line old-record-id-C3GwdoPOXoCpfJx3mZMucv8osEe"><div>The affected package was not developed or distributed by MEXC</div></li></ol><div class="ace-line ace-line old-record-id-VRmLdlIBDopVlqxnyp5usEWXsme"> </div><div class="ace-line ace-line old-record-id-TW9udWNS8osRBmx14GiuYolqscb">We want to emphasize that the malicious software package in question — ccxt-mexc-futures — was not released by MEXC and has never appeared in our official repositories, documentation, or communications.</div><div class="ace-line ace-line old-record-id-WkG4dUTJootnAXxwIupuaYypsXf"> </div><div class="ace-line ace-line old-record-id-DRRQdFUrAonrSVxdMBXuXFM9sIf">Our platform’s systems remain secure and fully operational. We have identified no internal vulnerabilities or compromises, and our advanced monitoring systems have detected no associated abnormal trading activity.</div><div class="ace-line ace-line old-record-id-P59idv4MSow3b3xCTlcuGvi9sng"> </div><ol start="3" class="list-number1"><li class="ace-line ace-line old-record-id-ErladV4mrokXADxl0C8ulyBqs9g"><div>No user asset losses reported</div></li></ol><div class="ace-line ace-line old-record-id-HxFyd0f06oJZdZxjlfSueh2psQf"> </div><div class="ace-line ace-line old-record-id-Th4Jd66Wpowh7cx6CdJuP6q2sxh">The malicious package has since been removed from the third-party platform. At this time, MEXC has not received any reports from users regarding asset losses or unauthorized access resulting from this incident. We continue to monitor the situation closely and collaborate with relevant parties to ensure ongoing protection of our community.</div><div class="ace-line ace-line old-record-id-BFpkdet0mowrCFxcPuHu7knlsde"> </div><ol start="4" class="list-number1"><li class="ace-line ace-line old-record-id-Q3t0dN8sSo8zvNxS0V4u6vSEs0c"><div>Security reminders to developers and API users</div></li></ol><div class="ace-line ace-line old-record-id-NJmHd3lT4oUDtqxxmE5uijmNsfg"> </div><div class="ace-line ace-line old-record-id-DuMEdyqjvotJPWxsdzFu1OLrs1b">We urge all developers and users integrating with MEXC or any other platform to adhere strictly to the following security best practices:</div><div class="ace-line ace-line old-record-id-TGDPdKfD5oQZauxoDzMuR0OXsxg"> </div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-St2fd8dcJoLi4WxRGZHuvJwCspc"><div>Always download SDKs and developer tools exclusively from MEXC’s official website or documentation: <a href="https://www.mexc.com/mexc-api">https://www.mexc.com/mexc-api</a></div></li></ul><div class="ace-line ace-line old-record-id-J0wodAvWXoh8kXxNWKSuwIZWszm"> </div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-Fi5Gd54gFoSDAXx6aTYuYa4msLd"><div>Exercise extreme caution with third-party packages, even those with similar-sounding names, unless their authenticity has been rigorously verified through official MEXC channels.</div></li></ul><div class="ace-line ace-line old-record-id-Kv0wdFhoVoLJd7x8gANuCQiQsBf">、</div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-UE6LdHzdro1juMxZ7XauvCLdsnb"><div>Treat your API keys as highly sensitive credentials. Implement strict permission limitations, utilize IP whitelisting where possible, and practice regular key rotation.</div></li></ul><div class="ace-line ace-line old-record-id-QI1adbRUqoxtwsxUmPKuw7K7sMf"> </div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-SedQd0FzLo38WMxhBGouWuvmsLc"><div>Avoid executing code from unverified sources. Always meticulously double-check URLs and the origins of downloaded software.</div></li></ul><div class="ace-line ace-line old-record-id-JxZEdeS5boye8vx8hzOuDc4SsCd"> </div><ol start="5" class="list-number1"><li class="ace-line ace-line old-record-id-GUordSGaToKjVsxIfy9uxCz8sVx"><div>Important Reminder Regarding Impersonation Attempts</div></li></ol><div class="ace-line ace-line old-record-id-N7xgd0NEtonGuJxHGk9usn57sWd"> </div><div class="ace-line ace-line old-record-id-VvBqdJ3x7oKGQHxbBxAuP7Imsgg">Separately, we have also observed instances of individuals attempting to impersonate MEXC staff through unofficial channels. If anyone claims to represent MEXC and contacts you through unofficial channels, please first verify their identity via our official verification portal:<a href="https://www.mexc.com/official-verify"> https://www.mexc.com/official-verify</a>. Please remember that MEXC staff will never ask for your API credentials, account password, or other sensitive information.</div><div class="ace-line ace-line old-record-id-IZRXdg57gopVFYxVWFou8KSMs1b"> </div><div class="ace-line ace-line old-record-id-Dsuod2Db2onErkxOzX1u5rkysge">Our Commitment to Your Security:</div><div class="ace-line ace-line old-record-id-IODqdB66ho9Ae1x443NuB4yjsNc">The safety of our users and the integrity of our platform are, and will always be, our top priorities. MEXC is continuously enhancing its internal security measures, expanding user education initiatives, and actively engaging with the broader security community to proactively address emerging threats like these.</div><div class="ace-line ace-line old-record-id-S7YedFmf0o3g2axgp6AuWV2isvd">Thank you for your continued trust in MEXC. We remain steadfast in our commitment to providing a secure and transparent trading environment.</div><div class="ace-line ace-line old-record-id-Q9ELdD1G1oNA8fxaNUhuR4zRsWd"> </div><div class="ace-line ace-line old-record-id-YZVQd4HPDotvJbxglR4uoLxPsUA">MEXC Security Team </div><div class="ace-line ace-line old-record-id-AmTNdORlzoBBbvxAjpvu0U5mssd">April 16, 2025</div></div>

[DEX+ Trading Event] Reward Distribution Notice

2025-04-16

#DEX+

<div><div class="ace-line ace-line old-record-id-ECTKdAUydoaevuxE8Vcu1PVYsbg">We're thrilled to announce that the DEX+ Trading Event has concluded, and all event rewards have been successfully distributed to all eligible participants.</div><div class="ace-line ace-line old-record-id-IpDqd6YW7oESyFxIqZIu6dT3sIc"> </div><div class="ace-line ace-line old-record-id-IQridRpOBozeAAxhMUFusjexsde">To check your rewards:</div><div class="ace-line ace-line old-record-id-Xt49dI2MAoc0twxCRPCumMkQsc5">Go to Wallets → <a href="https://www.mexc.com/activity-reward-records">Event Rewards</a> in your account.</div><div class="ace-line ace-line old-record-id-TEaldDPrWo8J3BxuEXiuJLjDshc"> </div><div class="ace-line ace-line old-record-id-AYEBdxPf5otvBzxxsgGuU14Fs0g">For event details:</div><div class="ace-line ace-line old-record-id-Rdl1d0eZMokKB6xc0dCuUYETsGe"><a href="https://www.mexc.com/announcements/article/17827791522464">MEXC DEX+ Now Live: Join the Celebration & Share 150,000 USDT in Rewards</a></div><div class="ace-line ace-line old-record-id-EL2Xd3bWNoq23dxXih3uyovjs1f"> </div><div class="ace-line ace-line old-record-id-D8jad5rcYovwafxaS50uTk5ZsRc">Thank you for your participation and continued support.</div></div>