On the evening of October 31, 2026, UEEx detected a security incident involving a third-party technical service system. Preliminary investigations indicate that attackers may have exploited security vulnerabilities in the third-party system to gain access to certain user account information and attempt unauthorized account access and withdrawals.
Following the incident, UEEx's risk control system promptly identified suspicious transactions. Our security and manual review teams immediately intervened and successfully blocked the unauthorized withdrawal attempts.
Following a thorough verification, we confirm that this security incident resulted in no loss of user assets on UEEx. All user assets remain safe and have not been financially affected.
Incident Response Timeline
| Date & Time UTC+4 | Incident Stage | Incident Details and Response Measures |
|---|---|---|
| Oct 31, 20:49 | Detection & Escalation | The risk control review team detected suspicious withdrawal activity and immediately escalated the incident to the relevant personnel. |
| Oct 31, 21:04 | Initial Risk Containment | After confirming unauthorized withdrawal attempts, withdrawal services on the affected platform were immediately suspended to prevent further risks. |
| Oct 31, 21:40 | Platform-Wide Risk Containment | Following an assessment of the incident's scope, withdrawal services across all affected platforms were suspended to contain potential risks. |
| Oct 31, 21:41 | Attack Vector Containment | The attack entry point was successfully identified and blocked, cutting off the identified intrusion path used by the attackers. |
| Nov 1, 01:26 | Affected System Remediation | Security remediation of the affected systems was completed, and additional protective measures were implemented. |
| Nov 1, 03:21 | Comprehensive Security Review & Hardening | Security inspections and reinforcement measures were completed across all user-facing systems to further strengthen overall platform protection. |
| Nov 1, 12:38 | Risk Control Enhancement | New real-time risk control rules were deployed to automatically detect, block, and trigger alerts for suspicious activities involving new devices, new IP addresses, and new withdrawal addresses. |
| Nov 1, 12:55 | User Account Protection | All active user sessions were forcibly terminated, and unauthorized withdrawal addresses added by the attackers were removed to prevent further unauthorized account activities. |
| Nov 1, 13:11 | Sensitive Information Protection | Access to sensitive information pages, including billing and transfer history, was temporarily restricted to further minimize the risk of user data exposure. |
| Nov 1, 13:18 | Full Restoration of Withdrawal Services | Following the completion of the necessary security response measures, withdrawal services were fully restored across the platform. |
Security Measures Implemented by UEEx
To further strengthen account security and protect user assets, UEEx has implemented the following measures:
- Enhanced Account Protection: Temporary risk controls and forced session logouts have been applied to accounts identified as having experienced suspicious access.
- Strengthened Withdrawal Security: Monitoring of suspicious withdrawal activities has been enhanced, and additional risk control rules have been introduced.
- Comprehensive Security Investigation: UEEx has worked closely with its third-party technical service provider to investigate vulnerabilities, implement security fixes, and reinforce system protection.
- Enhanced Withdrawal Management: Temporary restrictions were imposed on certain withdrawal operations as a precautionary measure. Following the completion of the necessary security checks, withdrawal services were fully restored.
Recommended Account Security Measures
Although this incident did not result in any user asset losses, we strongly encourage all users to take the following precautions to further protect their accounts:
- Regularly Update Your Login and Payment Passwords: We recommend updating your passwords promptly and periodically. Avoid weak passwords or reusing passwords from other platforms.
- Enable Google Authenticator (2FA): We strongly recommend activating Google Authenticator to add an extra layer of security to your account and sensitive transactions.
- Monitor Your Account Activity: Regularly review your login history and withdrawal records. If you notice any suspicious activity, please contact UEEx official customer support immediately.
- Stay Alert to Phishing and Fraud: Always access your account through the official UEEx website or app. Never disclose your login password, payment password, or verification codes to anyone.
UEEx's Commitment to Security
The security of our users and their assets has always been UEEx's highest priority.
During this incident, our risk control system and manual review procedures played a critical role in promptly detecting and blocking unauthorized withdrawal attempts, successfully safeguarding user assets.
UEEx will continue to strengthen the security management of third-party technical service providers, improve account risk monitoring and withdrawal review mechanisms, and further enhance the platform's overall security infrastructure.
We sincerely apologize for any inconvenience caused by this incident and the temporary security measures.
Thank you for your understanding, trust, and continued support.
Comments
0 comments
Article is closed for comments.