HitBTC

Hyperliquid is a L1 blockchain best known for perpetual futures and spot trading. Beyond its flagship DEX trading platform, the ecosystem supports borrowing, lending, real world assets, and a full-fledged EVM, making it a leading force in decentralized finance. $BTC/$USDT: 80 935 $ETH/$USDT: 2 266 Trade $HYPE and other assets: hitbtc.com

Injective is a high-performance, Layer 1 blockchain specifically optimized for building DeFi applications. It supports fast, cross-chain trading of various financial instruments – including spots, derivatives, and futures – with near-zero gas fees and an on-chain, MEV-resistant order book. $BTC/$USDT: 80 878 $ETH/$USDT: 2 297 Trade $INJ and other assets: hitbtc.com

At HitBTC, we are always open to hosting exciting new projects, and we would be happy to see your token or coin on board. If you are willing to integrate into our platform, take the first step by filling out the application form: hitbtc.com/add-token

@bettermia2025 Hello. We appreciate your interest in our platform. Please forward your collaboration proposals to relations@hitbtc.com

@hitbtc Hi, I’m Mia from Bee Network. We’d like to explore partnering with HitBTC. Who would be the best person to message about collaboration opportunities? Thanks!

What are your thoughts on stablecoins? Do you find them a good safe haven from crypto market volatility? Come to the comments section and share ➡️

Dear Traders, Just a friendly reminder that our support team will never reach out to you first. All official contact information is available on our website hitbtc.com. Stay safe and only reach out to us through verified sources.

Don't forget about the Market Overview feature on HitBTC Get all the major information about Trading Volume, Price, Market Spread, Depth and Activity for all tokens listed on the HitBTC exchange on one page: hitbtc.com/market-overvie…

@Carlalambada Hi there. If you encountered an issue, please report it by submitting a ticket here support.hitbtc.com/en/support/tic… or by sending an email to support@hitbtc.com. The Support Team will look into this and will help.

@hitbtc ¿Por qué no funciona su página web? Tengo fondos y no puedo acceder.

Terra is a blockchain protocol that uses fiat-pegged stablecoins to power price-stable global payments systems. According to its white paper, Terra combines the price stability and wide adoption of fiat currencies with the censorship-resistance of BTC and offers fast and affordable settlements. Its original native token is $LUNC. $BTC/$USDT: 80 968 $ETH/$USDT: 2 379 Trade $LUNC and other assets: hitbtc.com

@Manish17108745 Hi there. If you encountered an issue, please report it by submitting a ticket here support.hitbtc.com/en/support/tic… or by sending an email to support@hitbtc.com. The Support Team will look into this and will help.

@hitbtc hitbtc team i want to ask you where is my doge coin my coin has been frozen for the last 5 years won't this be called theft you have cheated your users tell me will you return my coins

💡HitBTC Exchange has an Official Subreddit. 🔷Connect with fellow traders and engage with the community. Get updates, news, and guidance directly from the HitBTC team. 🔷Join now: reddit.com/r/HitBTC_Offic… 👉Read more: reddit.com/r/HitBTC_Offic…

@erneybest Hello. The Support Team responded to you on April 15th and provided you with instructions. Please check your inbox and proceed accordingly.

@hitbtc 1666570 this is my ticket number

Ever heard of a Whitelist? It's a security tool from HitBTC that lets you specify which addresses can receive withdrawals from your account. You won't be able to withdraw your funds to an address that isn't whitelisted. Keep your funds safe — learn more: support.hitbtc.com/en/support/sol…

@erneybest Hello! Thanks for reaching out to us. Please let me know your ticket number so I could look into this for you.

@hitbtc Why is hitbtc not replying mails??

Discover new trading opportunities with HitBTC and get access to 470+ tokens & 1000+ trading pairs Start trading now: hitbtc.com/btc-to-usdt

Humanity Protocol is a decentralized identity network that uses privacy-preserving biometrics to provide Sybil-resistant "Proof of Humanity" verification for Web3 applications. $BTC/$USDT: 77 055 $ETH/$USDT: 2 323 Trade $H and other assets: hitbtc.com

You can monitor your recent sessions and activity anytime on HitBTC. Simply navigate to Account Settings > Security > Last Activity. Learn more about this and our other security features designed to protect your account: support.hitbtc.com/en/support/sol…

@rashmi2a Hello. KYC is not requested from every trader. However, this can happen from time to time. This information is public and can be found in our Terms of use that every trader must read and accept before starting to use our platform.

@hitbtc Kyc need or not

If you are new to crypto trading, start your path as a trader with Demo HitBTC. Demo HitBTC is our educational and training platform where you are able to fund your account with test funds and try different trading strategies without making real investments. You can trade manually or via the API – the test mode is as responsive as the regular exchange platform. Try Demo HitBTC platform here: demo.hitbtc.com

@protonnz Hello! Thanks for reaching out to us. Please report this issue by submitting a ticket here support.hitbtc.com/en/support/tic… or by sending an email to support@hitbtc.com. The Support Team will look into this and will help.

Sent this message to @hitbtc URGENT — Stolen funds deposited to HitBTC user accounts 4927681381504662 and 5859219835425038 (XPR Network) — freeze request 1. Summary On 2026-04-23, my XPR Network (Proton) account charliebot was compromised and drained of approximately 1.48 million XPR plus dozens of other tokens. The attacker (account yougothacked on XPR Network) liquidated the stolen tokens on a DEX for native XPR, then deposited the proceeds into HitBTC in two transfers totalling 1,482,000 XPR. I am the rightful owner of @charliebot87 . I am requesting that HitBTC: 1. Immediately freeze the two recipient HitBTC accounts identified by the deposit memos below, pending investigation. 2. Preserve all logs, KYC records, IP/device data, and withdrawal history associated with those accounts. 3. Return the 1,482,000 XPR to my control once ownership is verified. 4. Cooperate with law enforcement under your AML obligations — I will be filing parallel reports with relevant authorities. Time is critical — the deposits occurred only hours ago and the attacker may attempt to withdraw or convert the funds. --- 2. Stolen-funds deposits to HitBTC Both deposits are from the attacker-controlled XPR Network account yougothacked to your platform's deposit account hitbtcxprins. The 16-digit numeric memos are your standard customer deposit IDs and identify the receiving HitBTC user accounts. Deposit 1 — 482,000 XPR - Date / time (UTC): 2026-04-23 19:45:23 - Amount: 482,000 XPR - From (sender on XPR Network): yougothacked - To (your deposit account): hitbtcxprins - Memo (HitBTC user ID): 5859219835425038 - Transaction ID: cf10aab732c399fccac72e8b899c148b7b440118f9cb2ee69bf3d7cb89a31e87 - Block: 378573300 - Block explorer: explorer.xprnetwork.org/transaction/cf… Deposit 2 — 1,000,000 XPR - Date / time (UTC): 2026-04-23 19:50:27 - Amount: 1,000,000 XPR - From (sender on XPR Network): yougothacked - To (your deposit account): hitbtcxprins - Memo (HitBTC user ID): 4927681381504662 - Transaction ID: af2326c4367dc8672ceac376dcc32cfa91efde8beb09421483218a839d55783f - Block: 378573908 - Block explorer: explorer.xprnetwork.org/transaction/af… Total deposited to HitBTC: 1,482,000 XPR --- 3. Proof these deposits are stolen funds — on-chain trail The same XPR was traced directly from the victim account charliebot to the attacker yougothacked and then into HitBTC. 3a. Attacker account creation (immediately before the theft) - yougothacked was created at 2026-04-23 17:59:05 UTC by wlcm.proton (Proton Network's public onboarding contract — anyone can create such an account in seconds, no KYC). - Display name set to "whoami". - Single private key controls both owner and active permissions: EOS7dRXo65zX5t1hjZ5pbo73NNWyiTR7nG4oZg6h1Fno15rYPJjBd. - Account has no other on-chain history — created solely to receive and launder the stolen funds. 3b. Drain from victim → attacker (representative XPR transfers) - 2026-04-23 18:02:06 UTC — 100 XPR (test transfer) — trx c166712d84ef31668e2ca95802d43a721d1a13b8b554049048e63c948476d839 - 2026-04-23 18:05:36 UTC — 99,000 XPR — trx d8f3d2f2e0371375783fc6dc1a4f1905b5f6e64ad57a026a8a606392bbe898af - 2026-04-23 19:31:54 UTC — 8,700 XPR — trx f269e94e5394f36e3bf984c0f68415ecbc48fd014e6f34f1aa9025d9f17dbdc5 Plus ~30 additional token transfers (CHARLIE, AGENT, PBR, SNIPPY, XUSDC, XMD, LOAN, GANG, SOON, MILLION, PHILO, GUARD, STOLE, DICE, HOLE, OG, PEPE, LIBRE, CAKE, ARMY, MARSH, PHOENIX, Q, PEPA, LOANLAD, PAPA, COOK, HRNG, XG, BRUCE, SAVE, ARK, SHAPE, TVL) drained from charliebot to yougothacked between 18:02 and 18:55 UTC. 3c. Liquidation on SimpleDEX The attacker executed 73 swap actions on the SimpleDEX V2 contract (simpledex on XPR Network) between 18:17 and 19:42 UTC, converting all stolen tokens to native XPR. All swaps are publicly recorded and traceable on-chain. 3d. Cashout to HitBTC Within minutes of the final swap completing, the attacker sent the resulting XPR to your platform — see Section 2 above. Attack window: 17:59 UTC (account creation) → 19:50 UTC (final HitBTC deposit) — under 2 hours total. --- 4. Network & explorer context - Network: XPR Network (formerly Proton) - Chain ID: 384da888112027f0321850a169f737c33e53b388aad48b5adace4bab97f437e0 - Public block explorer: explorer.xprnetwork.org - Public RPC (any HitBTC analyst can verify): proton.eosusa.io - All transaction IDs and account names in this report are publicly verifiable on-chain. --- 5. Remediation already taken on my side - 2026-04-23 21:19:20 UTC — charliebot's active permission was rotated via on-chain eosio::updateauth (transaction 1bbc0c8ff31d2d694d65b37ec33f3bdd44f569fc8dd48f89d3934ae1e2cfe764) to remove the compromised key and require a different account's signature. The attacker is locked out of charliebot going forward. - The compromised public key was: EOS7mHGjbxY6JRMFZgzhxwbUnVMCRpje9mWgVQBnhWia7AmNp4mFh (this is the public component only). --- 6. Proof of ownership of charliebot I am prepared to prove ownership of charliebot by any of the following means at your request: - Sign a HitBTC-supplied challenge string with the current charliebot permission - Execute a small on-chain action from charliebot with a memo string of HitBTC's choosing - Provide identity documents matching the original account registration Please tell me which method of verification you require. --- 7. Reporter / contact details - Name: Paul Grey - Country of residence: New Zealand - Relationship to victim account charliebot: owner / authorized operator --- 8. What I need from HitBTC (action checklist) 1. Acknowledge receipt of this ticket and assign a case number within 24 hours. 2. Freeze withdrawals/trading on HitBTC user accounts 5859219835425038 and 4927681381504662 immediately, pending investigation. 3. Preserve all KYC records, IP logs, device fingerprints, deposit/withdrawal history, and any linked accounts for the two user IDs above. 4. Confirm by what method you can verify my ownership of charliebot. 5. Coordinate with law enforcement — I will provide your case number to investigators when filing reports. Thank you for prompt attention. The compressed timeline of this attack (account creation → cashout in under 2 hours) suggests the attacker is aware that exchange responses are slow; every hour matters. Paul Grey @paulgrey