If you are my reader you know how i fall in love with [Binance](http://fuk.io/binance) since day one that ive used it. Luckily we got STEEM there now so im sure many of you use it already.

Today they are top1 exchange volume wise worldwide.
<a href="http://fuk.io/binance"><img src="https://i.imgur.com/zbSgmzL.png"></a>

At some point during the day users started reporting that all their altcoins were spot sold.
<a href="http://fuk.io/binance">![](https://steemitimages.com/DQmeg7w8tCgFfVSkZs5r9c8zGG9VZHexLsrU39pjew5pQj1/image.png)</a>

Later on VIA pumped like crazy.
<a href="http://fuk.io/binance"><img src="https://i.imgur.com/snQMxFV.png"></a>


It was found out fast that some users got phished and a popular bot was possibly hacked and API keys of users accessed.

Binance freezed withdrawal and investigated. 

>> On Mar 7, UTC 14:58-14:59, within this 2 minute period, the VIA/BTC market experienced abnormal trading activity. Our automatic risk management system was triggered, and all withdrawals were halted immediately.

>> This was part of a large scale phishing and stealing attempt.  

>> So far: All funds are safe and no funds have been stolen.

 >> The hackers accumulated user account credentials over a long period of time. The earliest phishing attack seems to have dated back to early Jan. However it was around Feb 22, where a heavy concentration of phishing attacks were seen using unicode domains, looking very much like binance.com, with the only difference being 2 dots at the bottom of 2 characters. Many users fell for these traps and phishing attempts. After acquiring these user accounts, the hacker then simply created a trading API key for each account but took no further actions, until yesterday.

>> Yesterday, within the aforementioned 2 minute period, the hackers used the API keys, placed a large number of market buys on the VIA/BTC market, pushing the price high, while 31 pre-deposited accounts were there selling VIA at the top. This was an attempt to move the BTC from the phished accounts to the 31 accounts. Withdrawal requests were then attempted from these accounts immediately afterwards.

>> However, as withdrawals were already automatically disabled by our risk management system, none of the withdrawals successfully went out. Additionally, the VIA coins deposited by the hackers were also frozen. Not only did the hacker not steal any coins out, their own coins have also been withheld.

>> The hackers were well organized. They were patient enough to not take any immediate action, and waited for the most opportune moment to act. They also selected VIA, a coin with smaller liquidity, to maximize their own gains.

>> After a thorough security check by Binance, we resumed withdrawals. Trading functionality was never affected. There are still some users whose accounts where phished by these hackers and their BTC were used to buy VIA or other coins. Unfortunately, those trades did not execute against any of the hackers’ accounts as counterpart. As such, we are not in a position to reverse those trades. We again advise all traders to take special precaution to secure their account credentials.

tldr; Hackers got access to some accounts and a bot, then used one of lowest liquidity markets (VIA) to dump all altcoins and buy overpriced VIA of themselves. [Binances](http://fuk.io/binance) filters triggered, nothing got stolen and trades were re-rolled.

## VIA Markets
<a href="http://fuk.io/binance"><img src="https://i.imgur.com/tYhtfT2.png"></a>

So guys from the exchange did a really good job stopping this "hack".

## STEEM IS THERE
<a href="http://fuk.io/binance"><img src="https://i.imgur.com/c2nQcui.png"></a>
Come on guys get to [Binanace](http://fuk.io/binance) and lets do some volume, its a top1 exchange and more investors will notice us.


<table>
  <tr>
    <th><h1> Follow, Resteem and VOTE UP <a href="/@kingscrown">@kingscrown</a> creator of <a href="http://fuk.io" rel="noopener">http://fuk.io</a> blog for 0day cryptocurrency news and tips!</h1></th>
    <th><img src="https://steemitimages.com/0x0/https://media.giphy.com/media/3ohzdPbKlUFVsmGpq0/giphy.gif" /></th>
  </tr>
</table>