Quote from: Bitcoin Guy on Today at 12:28:14 AM

(I hesitated to mention the name of the exchange in order to protect my existing account still in there.)

I started to use this exchange almost 4 years ago. There were no any issues till recently. Last Dec I logged into my account (which I haven't done it for a while) and the first page showed up saying that they will discontinue my services in 14 days and asked me to move my coins out to their US counterpart because I am a US customer. I was thinking to myself, it I had not logged in, I would never know about this because they did not contact me at all on this matter. So I contacted the US exchange and found that they do not serve customers in my state. So during all these times, I was researching for way(s) to relocate my coins. I contacted the foreign exchange and told them the challenges that I am facing in finding a place to put them. They just told me to move the coins out before I lose them and then no reply to my follow up email since.

Last week, I got three automated emails from them at the same time.
First email: request to reset password from [IP which is not mine] (and a 6-digit code was included for verification).
Second email: Successful password reset from that same IP.
Third email: Successful login from new IP..... to protect your account withdraw is disabled for the next 24 hours.
(Thanks God for this function with the 24-hour disable withdraw.)

This happening really got my attention. I immediately tried to log into my account. I entered my password 4 times (one time away from my account being locked) without successful as it had been changed. Thankfully, I did not try the 5th time knowing that my account would be locked and I would not be able to get any help from the exchange. I sent an email using an old email thread to them reporting the situation, but got a reply saying that my IP is from an unsupported country which they cannot service.

However, thankfully, I was able to go through the process by clicking on the Forgot Password link and reset my password. During that process, they sent me an email similar to the first email received before with the verification code. And by using the code along with my Google Authentication code, I reset my password. During the next several days, I did my best to get as much information as possible on how and where to move my coins to. By using a VPN tool (first time), a desktop wallet, a hard wallet, and a coin wallet that works with the hard wallet I was able to withdraw most of my coins out. Before I moved my coins out, my heart was so heavy and troublesome because I did not know when the hacker would attack again.

Now that I got most of the assets out from there I am more comfortable to talk about it and to share my story. Would this be an inside job given that they knew the US customers are vulnerable and helpless (since they cannot use their customer services anymore)? Else, how can the hacker by passing the email code verification and the Google Authentication process? This is still very unsettling to me.

If you are not going to mention the name of that exchange the same issue will soon be encountered by another user so I think you can help us with that. Lucky for you to recover all your funds and now it is a lesson learned.