Conversation

SBF
@SBF_FTX
Replying to
@SBF_FTX
6) To be clear, phishing is almost always a case where the user voluntarily (but unknowingly) gives their account credentials to a scammer by going to a bad site or something like that--but despite that, we take our duty to protect customers seriously, even from themselves.
5
89
SBF
@SBF_FTX
7) (This was actually one of the first lessons we learned--way back in 2019, a few users got phished, and our initial reaction was 'that sucks please use 2FA'. Upon reflection--and reaction from users--we *mandated* 2FA, which helped a lot.)
10
109
SBF
@SBF_FTX
8) Anyway, recently a frustrating thing happened. We’ve mostly stamped out sites that try to phish users by masquerading as FTX. But we can’t fix fake sites impersonating *other* services. A few users accidentally registered at fake other sites, including 3 Commas.
15
115
SBF
@SBF_FTX
9) They provided their FTX api keys to use the sites' trading tools. Others users were probably phished through other methods. But one way or another, these users were exploited by third party attackers.
7
69
SBF
@SBF_FTX
10) In general, there's very little we can do about this: other sites can fail to squash phishing attempts on them, and users can ask to let those sites control their FTX API keys. (This happened to accounts on other exchanges 3C was connected to as well, e.g. Binance.)
7
74
SBF
@SBF_FTX
11) Mostly this sucks, and is something we should be fighting as an industry. Right now each company has to separately deal with phishing and it sucks. FTX has, but others need to as well.
7
87
SBF
@SBF_FTX
12) Anyway--not only was this not FTX getting phished, it wasn't even an FTX site. And in general we can't compensate for users getting phished by fake versions of other companies in the space! It isn't FTX and we have basically no control over it.
5
79
SBF
@SBF_FTX
13) But in this particular case, we will compensate the affected users. THIS IS A ONE-TIME THING AND WE WILL NOT DO THIS GOING FORWARD. THIS IS NOT A PRECEDENT. We will not making a habit of compensating for uses getting phished by fake versions of other companies!
118
268
SBF
@SBF_FTX
14) But this once, we'll do it; roughly $6m total. (To be clear, only for FTX accounts! Hopefully other exchanges will comp theirs.) BUT AGAIN NOT A PRECEDENT, WE WILL NOT GOING FORWARD.
19
197
SBF
@SBF_FTX
15) Anyway -- maybe a time to try out the 5-5 standard on the 3Commas/phishing scammer! If they send back ~$5.7m (~95%) of the scam within 24h to 0xD15ff86129c3Da57756b33827DfFF6D252602284, we'll absolve them.
19
168
MistTrack🕵️
@MistTrack_io
Replying to
@SBF_FTX
Quote Tweet
MistTrack🕵️
@MistTrack_io
Hey @SBF_FTX pretty sure you got this under control, but you might wanna reach out to @FixedFloat & @cz_binance. Funds were first sent to 0x29...7c49, then laundered to various addresses. They weren't labeled on Etherscan but it is in our AML database. twitter.com/SBF_FTX/status
Image
1