What to do if your account is compromised

Speed matters. Work through these in order.

1. Change your password — from a device you trust.
2. Sign out all sessions — Profile → Security → Devices → Sign out all.
3. Check your 2FA — if you cannot generate valid codes, an attacker may have re-registered it.
4. Check whitelisted addresses — remove anything you did not add.
5. Contact support immediately — they can freeze withdrawals while it is investigated.
6. Secure your email — change that password too. Email is usually the first thing compromised.
7. Scan your devices for malware, particularly clipboard hijackers.

What we can and cannot do

We can freeze the account, stop pending withdrawals and investigate. We cannot reverse a completed blockchain transaction. Nobody can. This is why acting within minutes matters.