login

According to crypto user @HowardLouisHL, on June 30, 2026, he deposited 100,000 USDT into Ourbit and engaged in normal trading for about a week. On July 4, when he attempted to withdraw to Binance, the system prohibited the transaction. Customer service only replied, "Triggered risk control," without specifying the exact reason. The next day, the user's account was restricted from logging in. After being forced to submit all identity and account information, on July 20, he received an official email from Ourbit stating that the review had been postponed to July 3, 2027, and declared that "it may be extended again without reason."The user made three demands: to publicly disclose the specific risk control reasons, to provide a clear timeline for handling, and to immediately unfreeze and return the 100,000 USDT.As of now, Ourbit has not issued a public response regarding this incident.

The OKX Wallet officially launched the OKX social login wallet on July 21, 2026. Users can easily create and log in to the wallet using their social accounts, supporting Google, Apple, Email, and more. Up to 50 accounts can be derived, covering multiple mainstream public chains. Welcome to experience it.

According to The Block, the Hong Kong Securities and Futures Commission (SFC) has issued a circular requiring licensed virtual asset trading platforms and internet brokers to stop using one-time passwords (OTP) for user login and device binding within 12 months, and instead adopt stronger authentication methods such as passkeys and device binding.This move is due to the fact that in the 2025 Hong Kong cybersecurity incident, phishing attacks accounted for as much as 57%. The SFC also requires institutions to establish monitoring systems for suspicious logins, transactions, and withdrawals, and to promptly notify customers of any unusual account activities. Large brokers must implement the new authentication measures immediately. The SFC emphasizes that if internal controls are found to be deficient and result in customer losses, relevant responsibilities will be pursued.

B.AI officially integrates with the imToken wallet ecosystem. Users can access B.AI through the built-in DApp browser in the imToken App, logging in with one click on the TRON chain and quickly recharging, achieving a seamless connection between Web3 identity and AI services. This integration deepens the fusion of multi-chain wallets and AI platforms, providing users with a more efficient experience in AI dialogue, content creation, code generation, and Agent applications.

B.AI has officially integrated into the Solana ecosystem, with a comprehensive upgrade to its multi-chain login and payment capabilities. Users can now log in with one click through MetaMask and Phantom wallets, and complete top-ups or subscriptions using SOL, USDT, USDC, and WBTC on the Solana network. So far, B.AI has covered eight major public chains: TRON, BNB Chain, Ethereum, Base, Arbitrum, Optimism, Polygon, and Solana, building a more open and free multi-chain AI economic ecosystem. The platform offers exclusive limited-time benefits for new users: upon first login, users can receive 500,000 points, and top-ups enjoy a 1:1 bonus, with a maximum of $100 worth of additional points rewards for a single user. In the future, B.AI will provide lower entry barriers and a richer selection of assets to help you seamlessly enter the new world of the smart economy.

According to the official page, Polymarket has added a Steam account login method.

According to official news, AI NFT has announced the official integration of Google login, allowing users to choose a convenient Google account or decentralized wallet connection based on their preferences. New users do not need to go through a complicated registration process; they can log in to enjoy a million points reward and directly access several leading global AI large models. This upgrade further lowers the usage threshold, enabling users to easily embark on their AI exploration journey in their preferred way.

Slow Fog's Yu Xian posted on platform X: "A group hacking incident is occurring, hacker address: 0x913efc2062984288a0a083cd42b3a3422c07fcef, the hacker has currently profited $85,000, and this amount is still increasing. According to community feedback, this group mainly consists of yield farmers, and private keys/mnemonic phrases have been collected in advance by the hacker. The hacker is consolidating related funds. If you are using the MoreLogin fingerprint browser, please be cautious, but there is currently no evidence that MoreLogin or related plugins are the issue."

According to Cointelegraph, cybersecurity researcher Jeremiah Fowler discovered a public database containing approximately 149 million usernames and passwords, which were collected from infected personal devices through information-stealing malware. The database includes account information related to multiple major platforms, with at least 420,000 login credentials associated with Binance users.Experts emphasize that this is not a breach of Binance's systems, but rather the extraction of saved login information from infected devices via "information-stealing" malware. This malware disguises itself as game cheating tools or modifiers, specifically targeting cryptocurrency wallets and browser extensions, affecting over 100 browsers and at least 80 cryptocurrency exchanges, including Binance, Coinbase, Crypto.com, and MetaMask.

According to a report by Caijing Magazine, the main suspect in the laundering case involving 60,000 BTC, Qian Zhimin, escaped with a laptop that has a built-in cryptocurrency wallet. After several searches by the British police, multiple electronic devices, including phones, computers, and USB drives, were seized. One of the USB drives contained photos of pages from Qian Zhimin's notebook, while the relevant pages of the notebook were suspected to have been torn out before the police confiscated them.The photos of the pages recorded the startup password for the black computer and several mnemonic phrases, such as "number + love," and also included hints for the numbers, which made it possible to recover the previously seized bitcoins.

Coinbase CEO Brian Armstrong stated that the Coinbase embedded wallet now supports login via Google, Apple, and X.

ChainCatcher news, Slow Mist's information security officer 23pds posted on platform X about a new type of WebAuthn key login bypass attack method. Attackers can hijack the WebAuthn API through malicious browser extensions or website XSS vulnerabilities, forcing a downgrade to password login or tampering with the key registration process to steal credentials. This attack can be completed without physical access to the device or access to biometric features.WebAuthn is an important web authentication standard established by W3C and the FIDO Alliance, supporting various authentication methods such as hardware keys and biometrics, and is currently widely used for secure website logins. It is recommended that relevant enterprises and users pay timely attention to this security risk.

ChainCatcher message, the wallet-less L1 blockchain XION has officially implemented Apple ID protocol-level login, allowing over 3 billion Apple device users to access Web3 with one click.Without the need for a wallet or mnemonic phrases, the user login experience on XION is as seamless as logging into iCloud. XION ecosystem developers can also leverage the Apple ecosystem to build barrier-free Web3 applications for billions of users.XION stated that this is another milestone in XION's globalization strategy, following the European MiCA compliance white paper and progress with leading exchanges in North America.

ChainCatcher news, according to The Block, MetaMask has launched a new "social login" feature that allows users to create, back up, and restore cryptocurrency wallets using their Google or Apple accounts.This feature simplifies the process of creating and managing non-custodial wallets, allowing users to log in with their social accounts and create a password, while the system automatically generates a 12-word mnemonic (SRP) in the background. MetaMask emphasizes that even MetaMask itself cannot access the user's complete recovery information, thus maintaining the self-custody nature of the wallet. However, users should take care to properly safeguard their passwords, as losing them will result in the inability to recover the wallet.

ChainCatcher news, according to official sources, MetaMask has announced the launch of a social login feature, allowing users to quickly create, back up, and restore non-custodial crypto wallets using their Google or Apple accounts.This feature generates a 12-word mnemonic in the background, eliminating the need for manual recording and simplifying the traditional wallet management process. Users can get started in just two steps: log in to their social account and set a secure password.MetaMask reminds users that password security is crucial, as losing it will result in the inability to recover the wallet.

ChainCatcher message, Slow Mist Cosine posted a warning on X, indicating a recent surge in phishing email attacks targeting X users. The subject of the attack emails is "New login to X From XXX," which can bypass Gmail's spam filter.Attackers forge account abnormal login notifications to guide users to click on links such as "Change your password" or "Review the apps," which actually redirect to X's third-party application authorization page. Once users authorize, attackers can gain tweet posting and forwarding permissions, thereby manipulating the user's account to post content without their knowledge.Users need to be highly vigilant about such emails, avoid trusting abnormal login alerts, and refrain from clicking on email links or authorizing unknown applications.

ChainCatcher news, the Cybernews research team disclosed that 16 billion login credentials from online service providers including Apple, Google, and Facebook have been leaked, with a single database containing up to 3.5 billion records. Researchers found that this data was primarily exposed through unencrypted Elasticsearch or object storage instances, with the leaked data including access tokens, session cookies, and account metadata stolen by information-stealing malware.The identity of the original data holders is currently unclear, but researchers have confirmed that some databases may belong to cybercriminal organizations. Attackers may exploit the leaked credentials to launch targeted account takeovers, particularly on platforms hosting wallets or associated email accounts. Security experts recommend that users immediately update their passwords, enable two-factor authentication, and avoid storing recovery phrases in non-secure digital environments.

ChainCatcher news, according to the official announcement, the decentralized exchange Aster has announced the launch of the email registration and login feature. Users can now register an account via email and can immediately use the platform's services after completing the fund deposit.This feature aims to simplify the user operation process and lower the usage threshold.

ChainCatcher news, Bybit responded to a user's Apple ID login anomaly on platform X, stating that Bybit has taken immediate response and handling measures.The Bybit team actively responded after the user submitted feedback, including core members such as COO Helen, customer service and risk control leaders, and Chinese region leader Tina, who collaborated with the technical team to investigate. After multiple confirmations, it was determined that this incident was a special case involving individual users, and there was no systemic risk on the platform. The account KYC information was not tampered with, and funds remained secure throughout.Currently, Bybit has completed account processing as per user requests. Bybit reiterates that it always prioritizes the security of user assets and privacy protection, while also urging users to report any anomalies promptly through official channels.ChainCatcher previously reported that Bybit users faced face authentication failures due to an Apple ID vulnerability, hindering withdrawals of over $100,000.

ChainCatcher news, according to Decrypt, OpenAI has stated that it is investigating a hacking incident in which a hacker claims to have stolen login credentials for 20 million user accounts from the AI company and is selling them on dark web forums. The pseudonymous intruder posted a mysterious message in Russian, advertising "access codes for over 20 million OpenAI accounts," referring to it as a "gold mine," and also provided potential buyers with sample data that allegedly includes email addresses and passwords. It is reported that the complete dataset is being sold for "just a few dollars."If this incident is true, it would be the third major security incident OpenAI has faced since the public release of ChatGPT. However, this time, security researchers are even uncertain whether a hacking attack actually occurred. An OpenAI spokesperson responded, stating, "We take these allegations seriously, and so far, we have not seen any evidence that suggests this is related to a breach of OpenAI systems."