#mexc

#mexc

Cybersecurity researchers have disclosed details of a malicious Google Chrome extension that's capable of stealing API keys associated with MEXC, a centralized cryptocurrency exchange (CEX) available in over 170 countries, while masquerading as a tool to automate trading on the platform. The extension, named MEXC API Automator (ID: pppdfgkfdemgfknfnhpkibbkabhghhfh), has 29 downloads and is still available on the Chrome Web Store as of writing. It was first published on September 1, 2025, by a developer named "jorjortan142."

This listing on MEXC is a game-changer for R0AR and our community. By partnering with one of the world's leading exchanges, we're making DeFi smarter, safer, and more inclusive.

The package creates entries in the API for MEXC integration, allowing malicious redirection and theft of trading orders through compromised API endpoints.