lea2024

Date of Incident: 09 January 2026
I am sharing this incident in detail to raise awareness within the crypto community. What happened to me can happen to anyone, especially during live sessions and multitasking.
📍 Location & Situation
At the time of the incident, I was present at Twin Tulips and hosting a live session on Binance Square. Alongside the live session, I was also involved in an important meeting on my mobile phone, which divided my attention.
🔐 Events Leading Up to the Hack
Two days before the incident:
• My Gmail account was compromised
• Using access to my email, the attacker attempted and later succeeded in accessing my Binance account
• I immediately:
• Informed my Binance BDM
• Contacted Binance Customer Support
• My Binance account already had 2FA enabled
🎥 Live Session & Co-Host Involvement
During the Binance Square live session:
• I noticed unusual behavior on my account
• I informed my co-host and clearly told them:
“Please manage the live session, I need to focus on an urgent meeting on my mobile.”
• While my co-host was handling the live session, I became fully engaged in the meeting on my phone
🚨 Account Logout & Suspicious Activity
While I was distracted with the meeting:
• My Binance account logged out automatically
• I was not actively monitoring the account due to the meeting and live session running simultaneously
When I returned:
• I attempted to log in again
• A QR code appeared on the screen with a message indicating that I had been logged out and needed to scan the QR code to re-login
📱 QR Code Exploit
As soon as I:
• Scanned the QR code
• My screen began to freeze and lag
• The account logged out again
• Immediately after, the account logged back in automatically
At that moment:
• The attacker withdrew $831 from my Spot Wallet
💸 Financial Impact
• Total loss: $831
• Fortunately:
• No additional funds were available in the Spot Wallet
• Funds in the Earnings section remained untouched
• Either the attacker could not access those funds or failed to withdraw them

📞 Reporting & Follow-Up
After identifying the unauthorized withdrawal:
• I contacted Binance Customer Support immediately

• Submitted a complete report, including:
• Timeline of events
• Screenshots
• Live session context
• The case was forwarded for internal investigation
⚠️ Key Security Lessons
This incident highlights several critical lessons for all crypto users:
✅ Never underestimate email security
✅ Avoid scanning any QR code during high-pressure situations like live sessions
✅ Multitasking during live crypto events can increase risk
✅ Always assign a trusted co-host and stay alert during live sessions
✅ Immediately inform CS and BDM if any suspicious activity occurs
📢 Final Note to the Community
I am sharing this experience purely for community awareness. In crypto, even a few minutes of distraction can lead to irreversible loss.
Please stay alert, secure your email first, and never ignore unusual behavior on your account.

Senior Labour backbenchers are pressuring U.K. Prime Minister Keir Starmer to ban cryptocurrency donations to political parties, warning that digital assets and AI make foreign interference cheaper and harder to trace. Concerns Over Foreign Interference United Kingdom (U.K.) Prime Minister Keir Starmer faces growing pressure from senior Labour backbenchers to impose a full ban on […]

The Ministry of Defense Export Center of Iran, referred to as Mindex, is now accepting payments in cryptocurrency for advanced weaponry equipment, such as drones and ballistic missiles. This would be the first time that a country publicly accepts crypto for this kind of equipment. Report: Iran Now Taking Crypto For Advanced Weaponry, Sidestepping Sanctions […]

Been fighting a cold, 38.9C a couple of hours ago. First time getting sick after prison. This issue kept its airspace in my head for the last few days, even through the fever.
Our industry should be able to completely eradicate this type of poison attacks, and protect our users.

All wallets should simply check if a receiving address is a “poison address”, and block the user. This is a blockchain query.
Further, security alliances in the industry should maintain a real-time blacklist of these addresses, so that wallets can check before sending a transaction.
Binance Wallet already does this. A user would get a warning like below if they try to send to a poison address.

Lastly, wallets should not even display these spam transactions anywhere. If the value of the tx is small, just filter it out.
Protect users.