is it possible that someone got the mail with which you have registered at bitfinex. then he/she created an account and so knew the password. then he/she changed the mail adress in the account so you can log in and trade, so he/she then would log in and steal your btc, but you changed the password. so it was just kind of phishing.
One guy found BTC with a value of about 300'000 USD on his Bitfinex-account which he never opened
...How was he able to log in into an account which he never opened, please elaborate?
Just the same way as I did it: I received an e-mail from Bitfinex on my trashmail.com-mail that I've opened an account. I tried to log in and asked for a password reset. Then I got a link, klicked on it and received a new password on my mail address.
So just for documenting it: This was the first e-mail I received:
Hello,
Welcome to Bitfinex!
You're now ready to leverage trade, exchange bitcoins and earn interests on your deposit!
You can start by familiarizing yourself with all the Bitfinex features and how to use them here
Then you can start using Bitfinex by depositing some money into your account from the deposit page
We hope that you'll enjoy our platform. We'd be glad to hear your suggestions to improve it and your feedback. Don't hesitate to contact us at
contact@bitfinex.comImportant recommendations regarding security:
While we took great care of the security of our platform, it is up to you to protect the integrity of your Bitfinex user account. Below are some recommendations to protect your Bitfinex account and the funds you own in it:
Use Mozilla Firefox
Install NoScript addon for Firefox
Activate two-factor authentication (2FA) on Bitfinex
Do not connect to Bitfinex on a public computer
Thank you for choosing us and enjoy Bitfinex!
Then I asked for a password reset:
So then I got a new password:
Hello,
Your password has been reset
Your password has been reset on Bitfinex. Your new password is:
45EU4Nh8UV
Please change it as soon as you are connected to Bitfinex.
Regards,
The Bitfinex Team
https://www.bitfinex.com/With the new password, of course, I was able to log in, the person who originally created the account was locked out. Meanwhile, after several persons have complained, my and several other accounts have been deleted.
If you look at the information which was released by cloudminr or their hackers (which I believe are the same), some persons can be fully identified, others not, with a simple doxing. If you look in the cloudminr-discussion, you'll see that at least one guy never opened "his" account, checked it anyway and found hundreds of Bitcoins there.
So it is obvious that these accounts were not locked or anything, but ready to be used...