According to Bitfinex’s CTO Paolo Ardoino, the claims made by hacking group Fsociety are not credible. He believes that if the group had real information, they would have demanded a ransom through various channels instead of just leaking it.
Bitfinex does not store customer passwords and 2FA secrets in plain text. Furthermore, out of the 22,500 records leaked, only 5,000 matched with Bitfinex users.
Ardoino suggests that the hackers may have obtained the data from other crypto data breaches, as many users use the same login information across multiple sites.
He also shares a message from a security researcher who believes the hacking group is using the Bitfinex hack to advertise their data retrieval hacking tool.
Ardoino assures users that no breach has been detected and their funds are safe. The situation will continue to be investigated.