I experienced a serious security breach on my MEXC account, resulting in the theft of my entire balance. Initially, my futures position was closed without my action, and the funds were transferred to my spot wallet. I thought it might have been an error on my part, so I transferred the balance back into futures and opened a new ETH 3x position. However, 30 minutes later, the position was closed again, and the funds were returned to my spot wallet.
Concerned, I tried to withdraw my funds to my Binance account at address 0xe2c3994a6fbe2153e062c43bb98b50966f8de592. Before proceeding, I noticed an unknown address in the whitelist, which I deleted and replaced with my Binance wallet. Despite following all the security steps and seeing a "withdrawal successful" message, the funds were instead sent to an unknown wallet: 0x7f3decfcac3dd925c148b22c343f5b8e0f89565e.
Upon checking my transaction history, I found that all my coins in the spot wallet had been converted to BNB and withdrawn. I felt helpless as I watched this happen in real time. I haven’t yet contacted Turkish law enforcement because I doubt they could assist with an international exchange, but I am investigating the cause.
I strongly believe this breach was not due to a virus on my side but a critical failure in MEXC's security protocols. Why was facial recognition not required when changing the withdrawal address? Why wasn't I notified that my whitelisted withdrawal address had been altered? These are basic security measures that should have prevented this.
I am considering contacting the Turkish Embassy in Mexico and reporting the issue to international authorities. Your automated customer support dismissed my complaints in the first hour, making it seem like you didn’t want me to pursue the matter further.
Even if I cannot recover my funds, I request that you urgently review and strengthen your security protocols, particularly regarding withdrawal address changes. This incident has shattered my trust in MEXC, a platform I’ve used for years. I will be warning all my contacts in Turkey to avoid facing a similar experience.
Please take immediate action to investigate this breach, improve your security, and support affected users.