MEXC User Reports $340,000 Theft Following API Security Lapse

A MEXC user reported that their account was compromised after security settings were reset without their authorization. Despite MEXC freezing the account upon discovering the risk, the user claims the exchange failed to revoke an API key created by the attacker. Between 04:12 and 04:25 (Beijing Time) on September 27, 2026, approximately 322,110 USDT and 9,133,999 ONE were transferred out, totaling about $340,000. The user has filed a formal claim and police report, requesting that the exchange preserve logs and provide a written explanation regarding the security review process and the active API.