According to CoinMeta, a user reported that their MEXC account was stolen due to a security vulnerability in API, resulting in a loss of approximately $340,000. The user is currently negotiating with the platform for compensation. On September 25th, the attacker reset the security settings by forging credentials and created a new account API. After freezing the original MEXC account, the attacker did not revoke the newly created API account. Between 04:12 and 04:25 on September 27th (UTC +8), a total of 322,110 USDT and 9.134 million ONE were withdrawn from the account, amounting to about $340,000 in value. The MEXC official team responded that they have completed a preliminary investigation and provided a solution, and further communication will be conducted via email on a one-to-one basis.