User's MEXC Account Hacked for Approximately $340,000, API Not Revoked by Attacker

User shuang fei reported that their MEXC account was drained of 322,110 USDT and 9,133,999 ONE between 4:12 and 4:25 on September 27, totaling approximately $340,000. Two days prior, the platform confirmed the account was hacked, froze it, and assisted in recovery. The user changed their password and updated their Google verification as requested, but the API created during the attacker's control was not revoked, and the user was not informed. The user stated that on September 25, someone applied to change the email and unlink the Google verification, which was approved in about 10 minutes, using documents and a video that were not submitted by the user. Withdrawal activity occurred about 27 minutes after the 24-hour withdrawal limit was lifted. The user has filed a claim with the platform and attempted to report the incident to the police.