News Flash: Japanese compliant exchange Liquid encounters security vulnerability, urges users to proactively change passwords

On the 18th, Liquid, a compliant cryptocurrency exchange established by the Japanese company Quoine, announced that on November 13th, due to the domain hosting provider mistakenly disclosing control of the main domain account to malicious actors, a security vulnerability was created.

On the 18th, the compliant exchange Liquid, operated by the Japanese company Quoine, announced that on November 13th, a security vulnerability occurred due to the domain hosting provider mistakenly disclosing control of the main domain account to malicious actors.

The CEO of Liquid, Mike Kayamori, stated that malicious actors may have been able to control several internal email accounts through this incident, potentially infiltrating the exchange's infrastructure and obtaining internal data.

Kayamori emphasized that user funds in the cold wallets were not compromised and regulatory authorities have been notified.

He also mentioned that the breach may have exposed users' KYC data, including emails, names, addresses, and passwords, increasing the risk of users being targeted in malicious attacks.

The company urged users to change all passwords and 2FA verifications on the platform.