CZ: On the same day, 4 data breaches occurred, reminding to guard against phishing and SIM hijacking

CZ's post pointed out that on that day, there were 4 reported data breaches involving Coinbase's third-party vendor Amplitude, the South Korean cryptocurrency exchange Bithumb, and South Korean securities firms Mirae Asset and Daishin Securities. Among them, the breach related to Amplitude did not affect customer funds.

CZ stated that the leaked exchange data was primarily used for phishing, SIM card hijacking, social engineering scams, and wrench attacks. He suggested that all platforms use independent email aliases and dedicated backup numbers, refuse to fill out unnecessary personal information, and use strong independent passwords.

CZ also recommended enforcing the use of hardware security keys or passkeys, completely disabling SMS 2FA, enabling withdrawal address whitelists, withdrawal time locks, and anti-phishing codes, regularly cleaning API keys and active sessions, and requesting number porting locks from carriers. He also reminded that all customer service contacts that reach out proactively are scammers, and never to click on external links.