If you have been recently active you may have been confused about an official looking stake email in your inbox regarding VIP rewards.
The email was sent by a rogue individual who managed to get access to Stake's Sendgrid account. We are continuing to investigate with Sendgrid how 2FA was bypassed and access was obtained but we will share what we know in the meanwhile.
- There's a chance that a group of Stake users who were recently active may have their Email address available to this individual. Please note that there is no other associated information linked to these Email addresses. It would be simply a raw Email, unlinked to even a username or any form of identity. As a result we deem this to be a minimal risk threat.
- No user funds, passwords, KYC, or Stake accounts were effected. The phishing website was taken down within minutes and as a result no damage was incurred We are very lucky we have quick notifications around this & a great relationship with hosting companies.
We will have further information available soon. As always if you require specific help please contact your VIP host or our live support.
In the meanwhile we ask that you always make sure you are logging in on "stake.com" and set 2FA.
Hey Stunna, probably seems like I have a vendetta with the hack and everything else the last few days, I don't and intend on using the site moving forward. I would definitely take issue with this explanation above though. The information, perhaps not in this leak but in another definitely had sensitive information attached as rollbit has been emailing all of the users above a certain category offering them money to come to the company. They know exactly what position a player is at stake(plat diamond etc) and catered their welcome bonus around that. Many of the other diamond players i know and myself only use our email for stake alone, there is no other website no other connection to the email address. For instance my welcome bonus was 4 times higher than someone at a regular diamond level. I've said it over and over again that stake is by far the best crypto site. I just struggle to undertand why stuff like this isn't addressed? The sites targeted because you have the biggest volume and players, which is great but the security and transparency isn't near where it should be. We shouldn't be figuring out ways to secure the site from hackers, it should be secured plain and simple, other compnanies shouldn't be buying email lists and ranking lists from people. This stuff shouldn't be happening, yet it is.