Fake Sample Exchange staff are calling
Customers report callers posing as support staff and asking them to move funds to a so-called safe wallet. A real exchange will not ask that.
Example Wallet users: move funds now
The company withdrew a malicious extension update. If you installed version 4.2.1, treat that wallet as unsafe.
What to do now
- Remove version 4.2.1 from your browser.
- Create a new wallet with a new seed phrase on a clean device.
- Move your funds to the new wallet, starting with the largest balances.
- Do not reuse the old seed phrase.
Are you affected?
You may be affected if you use the browser extension and it updated between 26 and 28 October. Open the extension’s settings to see the version. Mobile and hardware wallets are not known to be affected.
Ignore messages offering a fix, a refund or a recovery service. Never share your seed phrase or private key.
Confirmed
- The company withdrew version 4.2.1.
- Its statement tells users to move their funds.
Claimed
- Researchers estimate losses of $1.2M to $1.9M.
- Some users report losses on older versions, which the company disputes.
Unknown
- How the release was compromised.
- How many people installed it.
What happened
On 28 October the company said an unauthorized version of its extension had been released. Independent researchers then published the addresses they believe received stolen funds.
Update log
1 Nov 2026, 14:20 UTC: Latest update to this sample report.
Sources
[The Editor links primary sources here before publication.]
Disclosures
[AI use, holdings and commercial relationships are shown here.]