On: Crypto.com accounts had unauthorized withdrawals

[101008]

How did they check if a withdrawal was unauthorized (real) or not? What if I did a withdrawal, say it was unauthorized, and claim the money (and also have the crypto in a different wallet)?

[JaimeThompson → 101008]

I'm not sure but I suggest they use some sort of distributed crypto solution to resolve such issues.

[samjmck → 101008]

I'm guessing any withdrawal that was done while using an exploit to bypass 2FA could be called unauthorized in this case

[YXNjaGVyZWdlbgo → 101008]

I guess they know which accounts circumvented their previous 2FA implementation.