Gate's Response to Recent Security Incident: Third-Party Unauthorized Access to Customer External Information, Promptly Traced Fund Flow

BlockBeats News, July 9th. In response to the online rumors of a "Gate Theft of 1.7 Million", Gate has released a comprehensive investigation report. Gate, upon receiving feedback from customers, immediately initiated a special retrospective mechanism to trace and cross-verify the entire process of this security unbinding request. After retrieving and reviewing all application materials, it was confirmed that the applicant submitted the following proof documents highly matching the customer's account, indicating that the applicant not only had access to the customer's account information but also obtained the customer's real-name information, Alipay account, transaction records, and relevant device operation permissions through external channels, and successfully passed Alipay's multi-factor authentication.

Gate's security unbinding review mechanism strictly follows a four-tier verification process of "multi-channel advance notice + system risk control initial screening + manual multi-layer review + time protection," and has never and will never approve any security change request based solely on a single piece of evidence. In addition, the platform has a mature permission control and data leak prevention system. The applicant accurately submitted personal information that the platform did not previously possess, and this incident was in no way a result of a platform leak.

Since the incident occurred, Gate has given top priority to the issue, promptly organized a complete review of all fund flows, collaborated with the security, compliance, legal, and business teams, mobilized available resources to conduct on-chain analysis and asset tracing and freezing work. Currently, Gate is actively coordinating with Tether and other relevant third-party institutions to advance the legal and operational processes of fund freezing. Subsequently, cooperation is still needed to coordinate processing across various platforms and provide necessary additional materials as requested.

Based on the findings of this investigation, the core risk point exposed in this incident is that the customer's external real-name information, Alipay account, and device permissions were leaked and illicitly obtained and used by a third party.