Submit an articleAdvertiseRSSXBlueskyThe Daily Brief
Markets

Crypto exchange security compromised on multiple servers

Unauthorized access found on multiple servers

CryptoBorne · Markets Desk · Edited by R. J. Calder · Published · 3 min read
crypto exchange security threat
Crypto exchange security threat Image: CryptoBorne / AI-generated illustration
Key takeaways
  • Multiple crypto exchange servers have been compromised 1
  • Unauthorized sessions originated from a single IP address 1
  • No malicious activity has been detected yet 1
In this article
  1. Security threat
  2. Impact on users
  3. Crypto market news
  4. What it means for readers
  5. What isn't known yet
  6. FAQ

Security threat

Generally, a recent investigation uncovered a security threat to crypto exchange servers 1. This threat is significant, affecting over 109 organizations 1. Meanwhile, the threat involves unauthorized access to these servers, with 2,408 unauthorized sessions enrolled since November 3, 2026 1. Ultimately, these sessions came from machines with names like KUCOIN-SRV and LAPTOP-BINANCE 1.

Huntress investigated the incident after being tipped off by an MSP partner 1. The investigation found unauthorized guest sessions appearing on ScreenConnect panels from machines with crypto exchange-themed names 1. As of November 13, related activity was seen across at least 118 self-hosted ScreenConnect servers 1. The sessions were real entries in the server's database 1.

The security threat is a concern for users who store their assets on these platforms 1. The unauthorized sessions have been added over the course of the past 10 days 1. Across Huntress' telemetry, the first session was enrolled November 3, and the latest one was enrolled November 13 1. Nearly all the sessions connected from a single IONOS-hosted IP, 74.208.158[.]106 1.

Crypto exchange servers face security risk

Impact on users

Users face significant risks when storing assets on platforms like KUCOIN and BINANCE 1. They may lose their funds due to unauthorized sessions. Sensitive information could also be compromised. The risk is high with 2,408 unauthorized sessions enrolled since November 3, 2026 1.

Crypto exchange users are advised to monitor their accounts closely for suspicious activity 1. They should report any unusual behavior. The investigation is ongoing, and more information is expected soon. At least 109 organizations have been affected by the security threat 1.

Concerns about user assets on self-hosted ScreenConnect servers have increased, with 118 servers compromised by fake sessions 1. Crypto exchanges must prioritize user security to prevent further incidents. Vigilance is crucial in the crypto industry, as highlighted by this incident. Servers are vulnerable to such attacks, emphasizing the need for caution.

Crypto market news

Developments are being closely watched in the crypto market 1. Huntress investigated a cluster of unauthorized guest sessions 1. Bitcoin traded at $68,256.00, and Ether traded at $1,927.65 4. Prices are delayed.

Some crypto exchanges are offering discounts and rewards to users 3. Bybit and Bitget gave users cashback and trading rewards 3. OKX offers a 20% Lifetime Discount on Trading Fees 3. Users can take advantage of these offers.

Black Friday promotions are a significant event in the crypto calendar 3. Crypto-card users increased spending by 33% during Black Friday last year 3. Exchanges such as Bybit and Bitget are expected to offer deals 3. Users can expect to see discounts and rewards from various crypto exchanges 3.

What it means for readers

According to Huntress, 2,408 unauthorized sessions were found on 118 servers 1. Naturally, readers who use crypto exchanges are at risk of losing funds 1. Furthermore, sensitive user information could be compromised 1. The company notes that this risk is high for users of exchanges like KUCOIN and BINANCE 1.

Readers should use strong passwords and enable two-factor authentication 1. They should monitor their accounts regularly 1. This helps prevent unauthorized access 1. Huntress recommends updating ScreenConnect clients to 26.6.5 or later 1.

An IONOS-hosted IP, 74.208.158[.]106, was identified as the source of unauthorized sessions 1. Users should be wary of fake sessions with crypto-themed names 1. Personal security must be a priority, especially in light of recent incidents 1. Huntress discovered fake sessions on 109 organization accounts, sparking further concern 1.

What isn't known yet

Investigations into the cause of the breach are ongoing 1. More information is expected soon 1. The affected exchanges are working to resolve the issue and prevent future breaches 1.

The impact of the security threat on the crypto market as a whole is still unclear 1. The prices of major cryptocurrencies have been affected by the news 4. However, the full extent of the impact is still unknown 1.

Following these events, developments in this story are expected to unfold soon 1. The situation will become clearer 1. Readers are advised to stay informed and take precautions to safeguard their assets 1.

Frequently asked questions

What is the security threat to crypto exchange servers?

The security threat involves unauthorized access to these servers, which could potentially lead to malicious activity 1.

What can users do to protect their assets?

Users can take precautions such as using strong passwords and enabling two-factor authentication 1.

What are the current prices of Bitcoin and Ether?

The current prices are $68,256.00 and $1,927.65, respectively, but these prices are delayed 4.

About this article

Our system reads Bitcoin, Ethereum, crypto markets, regulation and DeFi coverage from established publishers every hour. A story is only written when at least three independent outlets report it. Every figure must appear in a cited source, and each draft passes automated checks for accuracy, originality and readability. Drafts that score highly on every check publish automatically; the rest wait for a human editor. Drafted with AI assistance from the sources listed. Not financial or professional advice.

Update log
  • Published.
About the editor

CryptoBorne is edited by R. J. Calder, the pen name of the independent editor who runs it. Each story cites at least three independent publishers. More about the editor. Spotted an error? Email corrections@cryptoborne.com.

Follow CryptoBorne

Every new story, with its sources, as it publishes.

Related

Next story: Trump Nominates Four to SEC, CFTC Amid Crypto Debate
From CryptoBornePut your brand in front of crypto readers.

Put your brand next to CryptoBorne's daily crypto coverage. Ask about sponsorships.