<div><div class="ace-line ace-line old-record-id-PMKFdrHLYoBAT4xQPY4uoCRCsBe">The MEXC Security Team is aware of recent online reports concerning malicious software packages that impersonate cryptocurrency exchange SDKs on third-party platforms. We understand that some online discussions have linked this industry-wide issue to MEXC, and we want to provide a clear and transparent clarification to our valued users.</div><div class="ace-line ace-line old-record-id-YQhCdvbxxo6mg4xXVkkuaNqdsvc"><br /></div><ol start="1" class="list-number1"><li class="ace-line ace-line old-record-id-Rs4jdlgQeoBWghxfM5ku2i3Asnd"><div><strong>This is an industry-wide phishing-style supply chain attack</strong></div></li></ol><div class="ace-line ace-line old-record-id-UcOWdk1LjonpEAxPgoYuu1e4sVb"><br /></div><div class="ace-line ace-line old-record-id-ZdkEdFVJeoEUNcx7X7Lu3Jros7c">The malicious package is an example of a common tactic used by threat actors targeting the Web3 ecosystem. These attackers impersonate legitimate SDKs of well-known exchanges and publish these counterfeit packages on unofficial platforms such as PyPI and other code repositories. Their goal is to deceive developers into installing them and submitting API credentials, which are then abused to access or transfer assets without authorization. This method is similar in principle to phishing websites.</div><div class="ace-line ace-line old-record-id-IgZId51iioKOdbxvz50uXR0sswf"><br /></div><div class="ace-line ace-line old-record-id-DOGAdZlyzogSqEx3rwOuXSyysMg">For a more comprehensive understanding of phishing tactics, we encourage you to read our dedicated article here: <span style="color:rgb( 36 , 91 , 219 )"><u><a href="https://www.mexc.com/learn/article/17827791518952">https://www.mexc.com/learn/article/17827791518952</a></u></span></div><div class="ace-line ace-line old-record-id-PTw2dYKrIomim5xIwQIuqGG0sQd"><br /></div><div class="ace-line ace-line old-record-id-S0FTdmpAHovSdPx39JYuIWj6syb"><br /></div><ol start="2" class="list-number1"><li class="ace-line ace-line old-record-id-C3GwdoPOXoCpfJx3mZMucv8osEe"><div><strong>The affected package was not developed or distributed by MEXC</strong></div></li></ol><div class="ace-line ace-line old-record-id-VRmLdlIBDopVlqxnyp5usEWXsme"><br /></div><div class="ace-line ace-line old-record-id-TW9udWNS8osRBmx14GiuYolqscb">We want to emphasize that the malicious software package in question — ccxt-mexc-futures — was not released by MEXC and has never appeared in our official repositories, documentation, or communications.</div><div class="ace-line ace-line old-record-id-WkG4dUTJootnAXxwIupuaYypsXf"><br /></div><div class="ace-line ace-line old-record-id-DRRQdFUrAonrSVxdMBXuXFM9sIf">Our platform’s systems remain secure and fully operational. We have identified no internal vulnerabilities or compromises, and our advanced monitoring systems have detected no associated abnormal trading activity.</div><div class="ace-line ace-line old-record-id-P59idv4MSow3b3xCTlcuGvi9sng"><br /></div><ol start="3" class="list-number1"><li class="ace-line ace-line old-record-id-ErladV4mrokXADxl0C8ulyBqs9g"><div><strong>No user asset losses reported</strong></div></li></ol><div class="ace-line ace-line old-record-id-HxFyd0f06oJZdZxjlfSueh2psQf"><br /></div><div class="ace-line ace-line old-record-id-Th4Jd66Wpowh7cx6CdJuP6q2sxh">The malicious package has since been removed from the third-party platform. At this time, MEXC has not received any reports from users regarding asset losses or unauthorized access resulting from this incident. We continue to monitor the situation closely and collaborate with relevant parties to ensure ongoing protection of our community.</div><div class="ace-line ace-line old-record-id-BFpkdet0mowrCFxcPuHu7knlsde"><br /></div><ol start="4" class="list-number1"><li class="ace-line ace-line old-record-id-Q3t0dN8sSo8zvNxS0V4u6vSEs0c"><div><strong>Security reminders to developers and API users</strong></div></li></ol><div class="ace-line ace-line old-record-id-NJmHd3lT4oUDtqxxmE5uijmNsfg"><br /></div><div class="ace-line ace-line old-record-id-DuMEdyqjvotJPWxsdzFu1OLrs1b">We urge all developers and users integrating with MEXC or any other platform to adhere strictly to the following security best practices:</div><div class="ace-line ace-line old-record-id-TGDPdKfD5oQZauxoDzMuR0OXsxg"><br /></div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-St2fd8dcJoLi4WxRGZHuvJwCspc"><div>Always download SDKs and developer tools exclusively from MEXC’s official website or documentation: <span style="color:rgb( 36 , 91 , 219 )"><u><a href="https://www.mexc.com/mexc-api">https://www.mexc.com/mexc-api</a></u></span></div></li></ul><div class="ace-line ace-line old-record-id-J0wodAvWXoh8kXxNWKSuwIZWszm"><br /></div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-Fi5Gd54gFoSDAXx6aTYuYa4msLd"><div>Exercise extreme caution with third-party packages, even those with similar-sounding names, unless their authenticity has been rigorously verified through official MEXC channels.</div></li></ul><div class="ace-line ace-line old-record-id-Kv0wdFhoVoLJd7x8gANuCQiQsBf">、</div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-UE6LdHzdro1juMxZ7XauvCLdsnb"><div>Treat your API keys as highly sensitive credentials. Implement strict permission limitations, utilize IP whitelisting where possible, and practice regular key rotation.</div></li></ul><div class="ace-line ace-line old-record-id-QI1adbRUqoxtwsxUmPKuw7K7sMf"><br /></div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-SedQd0FzLo38WMxhBGouWuvmsLc"><div>Avoid executing code from unverified sources. Always meticulously double-check URLs and the origins of downloaded software.</div></li></ul><div class="ace-line ace-line old-record-id-JxZEdeS5boye8vx8hzOuDc4SsCd"><br /></div><ol start="5" class="list-number1"><li class="ace-line ace-line old-record-id-GUordSGaToKjVsxIfy9uxCz8sVx"><div><strong>Important Reminder Regarding Impersonation Attempts</strong></div></li></ol><div class="ace-line ace-line old-record-id-N7xgd0NEtonGuJxHGk9usn57sWd"><br /></div><div class="ace-line ace-line old-record-id-VvBqdJ3x7oKGQHxbBxAuP7Imsgg">Separately, we have also observed instances of individuals attempting to impersonate MEXC staff through unofficial channels. If anyone claims to represent MEXC and contacts you through unofficial channels, please first verify their identity via our official verification portal:<a href="https://www.mexc.com/official-verify"> https://www.mexc.com/official-verify</a>. Please remember that MEXC staff will never ask for your API credentials, account password, or other sensitive information.</div><div class="ace-line ace-line old-record-id-IZRXdg57gopVFYxVWFou8KSMs1b"><br /></div><div class="ace-line ace-line old-record-id-Dsuod2Db2onErkxOzX1u5rkysge"><strong>Our Commitment to Your Security:</strong></div><div class="ace-line ace-line old-record-id-IODqdB66ho9Ae1x443NuB4yjsNc">The safety of our users and the integrity of our platform are, and will always be, our top priorities. MEXC is continuously enhancing its internal security measures, expanding user education initiatives, and actively engaging with the broader security community to proactively address emerging threats like these.</div><div class="ace-line ace-line old-record-id-S7YedFmf0o3g2axgp6AuWV2isvd">Thank you for your continued trust in MEXC. We remain steadfast in our commitment to providing a secure and transparent trading environment.</div><div class="ace-line ace-line old-record-id-Q9ELdD1G1oNA8fxaNUhuR4zRsWd"><br /></div><div class="ace-line ace-line old-record-id-YZVQd4HPDotvJbxglR4uoLxPsUA">MEXC Security Team </div><div class="ace-line ace-line old-record-id-AmTNdORlzoBBbvxAjpvu0U5mssd">April 16, 2025</div></div><p><span class="lark-record-clipboard"></span></p>
<div style="color:rgb( 51 , 51 , 51 );font-family:'-apple-system' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , sans-serif , 'system-ui';font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;background-color:rgb( 255 , 255 , 255 )"><p style="margin-top:0px;margin-bottom:1em;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><span style="font-size:15px">MEXC has disabled the API for the following spot trading pairs due to upgrade and maintenance purposes: <br /></span></p><div><div>SOLAR/USDT, DOGA/USDT, VES/USDT, TALK/USDT, EGAX/USDT, GRAMPUS/USDT<div><br /></div></div><span style="color:rgb( 51 , 51 , 51 );font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;background-color:rgb( 255 , 255 , 255 )">*Other spot trading pairs with API disabled in April 2025 will be updated in this announcement.</span></div><p style="margin-top:0px;margin-bottom:1em;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><strong style="font-weight:bolder"><br /></strong></p><p style="margin-top:0px;margin-bottom:1em;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><strong style="font-weight:bolder">Please note:</strong></p><ul class="list-bullet1" style="margin-top:0px;margin-bottom:1em;list-style:disc;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><li class="ace-line ace-line old-record-id-doxusqaCW4qE86ueQcD9LkOnUwc" style="list-style:inherit;font-size:15px"><div><strong style="font-weight:bolder">Once disabled, users cannot use the API trading feature to place orders for any spot trading pairs listed above on MEXC.</strong><span style="font-size:15px"> <span style="font-size:15px">However, users can still carry out actions manually to their currently holding positions via WEB or the MEXC app.</span></span></div></li><li class="ace-line ace-line old-record-id-doxusqaCW4qE86ueQcD9LkOnUwc" style="list-style:inherit;font-size:15px"><div>Once disabled, users may still carry out actions to the active API orders of the trading pairs listed above via WEB or the MEXC app.</div></li></ul><div class="ace-line ace-line old-record-id-doxus8QUiuE2CsmMsEbRnFFyBcg" style="color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )">We apologize for the inconvenience caused. Thank you for your support!</div></div><br class="Apple-interchange-newline" />
<div><div class="ace-line ace-line old-record-id-KZh6dwg6foxls2xs1Z1uT3bgsTq">Starting from <strong>March 28, 2025</strong>, MEXC will implement API access restrictions for Assessment Zone trading pairs. The details are as follows:</div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-YqXmdfnz1oJMwmx42wmuHnxbsgN"><div>API users will be unable to query Assessment Zone trading pairs via API.</div></li><li style="text-align:left" class="ace-line ace-line old-record-id-EiPNdmce1oHzKPxbv0puwnIVsOr"><div>API users will be unable to place orders for Assessment Zone trading pairs via API.</div></li><li style="text-align:left" class="ace-line ace-line old-record-id-YaeDd211DoOvqPxjlJruklgHsed"><div>API users will still be able to query open orders, order history, and trade history.</div></li><li style="text-align:left" class="ace-line ace-line old-record-id-UwI9d6U7bou3AdxKyVPus99nsGg"><div>API users will still be able to cancel orders normally.</div></li></ul></div><div><div class="ace-line ace-line old-record-id-D2BYdrieao9dhhxxp3juFLfqs4e"><strong>Please note:</strong></div><ul class="list-bullet1"><li style="text-align:left" class="ace-line ace-line old-record-id-Pebgdm4eVoSXAmxB45suuRcVsAf"><div>The exact implementation time will be reflected on our website</div></li><li style="text-align:left" class="ace-line ace-line old-record-id-LeDNdQWkkohL4exL7mGuPjoXsnd"><div>If a trading pair is moved out of the Assessment Zone, the API access restriction will be lifted.</div></li><li style="text-align:left" class="ace-line ace-line old-record-id-AGxYdX61XoLQ4CxFPtKuMqw6sVf"><div>If a trading pair is moved into the Assessment Zone, the API access restriction will be applied.</div></li></ul></div><div><div class="ace-line ace-line old-record-id-doxusuTCU8OLuLysFkoggG3rn2g">We apologize for any inconvenience this may cause and thank you for your understanding and support.</div></div><p><br /></p>
<div><div class="ace-line ace-line old-record-id-ScxydFZFIobaVaxB7zMuWttgs5e">To enhance overall order stability and ensure a smooth trading experience, MEXC will adjust the API Spot order limit to 5 orders per second (applicable to batch orders) starting Mar 25, 2025, 06:00 (UTC).</div><div class="ace-line ace-line old-record-id-FcE3dt73foRMS0xkpeCuZm6Ts9b"><br /></div><div class="ace-line ace-line old-record-id-Qo7NdfBytoJWW2x0PNLud3WNs6l">We recommend adjusting your order rate settings in advance to avoid any disruptions. Thank you for your understanding and cooperation.</div><div class="ace-line ace-line old-record-id-WwYBdba6CoUTvWxpybCuwedmsRd"><br /></div><div class="ace-line ace-line old-record-id-NZw5dY7tionRqlxxU1Huv8NFsmg">For any questions or API-related requests, please join the <a href="https://t.me/MEXCAPIsupport">MEXC API Telegram Group</a>. Our dedicated technical team is available 24/7 to support you.</div><div class="ace-line ace-line old-record-id-SJwYdjnqcoRBvQxIM3Ju2BzRsQh"><br /></div><div class=" old-record-id-Awt7dUG14oZdvrxoISwu9h9Bsnd"><hr /></div><div class="ace-line ace-line old-record-id-FgySdYZOSoFrsPxnrHDuAUthsSd"><strong>Explore Our Institutional Services</strong></div><p><br /></p><div class="ace-line ace-line old-record-id-FgySdYZOSoFrsPxnrHDuAUthsSd">MEXC has officially launched institutional services! Visit our <a href="https://www.mexc.com/activity/institution">Tailored Solutions</a> page for more details.</div><p><br /></p><div class="ace-line ace-line old-record-id-FgySdYZOSoFrsPxnrHDuAUthsSd">Looking to connect with a dedicated institutional account manager? Contact us at <a href="institution@mexc.com">institution@mexc.com</a>.</div><p><br /></p><div class="ace-line ace-line old-record-id-Nw3fd1bYGoahzkxmqQDub6cQsNb">We look forward to being <strong>your easiest way to global crypto markets</strong> — and the place where strategic growth begins.</div></div><p><br /></p>
<p style="margin-top:0px;margin-bottom:1em;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><span style="font-size:15px">MEXC has disabled API for the following spot trading pairs due to upgrade and maintenance purposes: <br /></span></p><div>WFT/USDT, ELMO/USDT, LEO/USDT, EDLC/USDT, GBCK/USDT, PEPECAT/USDT, VELAR/USDT, REDX/USDT, AVERY/USDT, <div style="white-space:pre-wrap">CAU/USDT, HASHAI/USDT, KATA/USDT, 5SCAPE/USDT, SLING/USDT, ORNJ/USDT</div><div><br /></div></div><p style="margin-top:0px;margin-bottom:1em;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><span style="color:rgb( 51 , 51 , 51 );font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;background-color:rgb( 255 , 255 , 255 )">*Other spot trading pairs with API disabled in March 2025 will be updated in this announcement.</span></p><p style="margin-top:0px;margin-bottom:1em;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><strong style="font-weight:bolder">Please note:</strong></p><ul class="list-bullet1" style="margin-top:0px;margin-bottom:1em;list-style:disc;color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )"><li class="ace-line ace-line old-record-id-doxusqaCW4qE86ueQcD9LkOnUwc" style="list-style:inherit;font-size:15px"><div><strong style="font-weight:bolder">Once disabled, users cannot use the API trading feature to place orders for any spot trading pairs listed above on MEXC.</strong><span style="font-size:15px"> <span style="font-size:15px">However, users can still carry out actions manually to their currently holding positions via WEB or the MEXC app.</span></span></div></li><li class="ace-line ace-line old-record-id-doxusqaCW4qE86ueQcD9LkOnUwc" style="list-style:inherit;font-size:15px"><div>Once disabled, users may still carry out actions to the active API orders of the trading pairs listed above via WEB or the MEXC app.</div></li></ul><div class="ace-line ace-line old-record-id-doxus8QUiuE2CsmMsEbRnFFyBcg" style="color:rgb( 51 , 51 , 51 );font-size:15px;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;font-family:'-apple-system' , 'system-ui' , 'segoe ui' , 'roboto' , 'helvetica neue' , 'helvetica' , 'arial' , sans-serif;background-color:rgb( 255 , 255 , 255 )">We apologize for the inconvenience caused. Thank you for your support!</div>