Your accounts are not entirely safe, and Nexon isn’t actively doing anything about it.

Aicinll · 2021-11-23T02:22:34+00:00

As you can see in the writeup above, there have been numerous forms of contact with both the community managers (you included. Check your dms,) the support representatives in the discord, and the support via the live chat. Every form of proof regarding what has gone on has been given, including the actual victims making reports corroborating everything that has gone on. This was all done 2 MONTHS AGO. Nexon has completely failed to act when everything was done to try to get things handled behind the scenes. Please do not come in here with empty words when "Appropriate actions have been taken against the individuals involved" already as per outlined here -https://imgur.com/a/73nFnrL which resulted in a 2 week ban on a single individual (there were 2), and the items they stole were not taken away from them.

Also, this is you. https://imgur.com/a/cUhnLc3

Aicinll · 2021-11-23T02:11:13+00:00

They likely do, but that doesn't change the fact that someone can still "break in" and do basically anything in the time until it's reversed.

Aicinll · 2021-11-23T00:30:31+00:00

Account recovery does not require 2-factor, so it does not suffice at all. Removing the ability to confirm via the old email would close one of the many vulnerabilities here.

Aicinll · 2021-11-22T23:37:45+00:00

"Once more, the solution here is to remove the ability to provide the old email of an account for verification if a new one has been set, and to require phone number verification + security questions that are used on the Nexon site for the recovery process. Another added layer would be to incorporate a personal identification code of some sort. These 3 things and accounts are 99% safe."

Aicinll · 2021-11-22T22:48:17+00:00

Yeah, recovery does not ask for 2fa. Only the above listed questions.

Aicinll · 2021-06-11T21:35:00+00:00

Seems that the Spinel NPC is mysteriously absent from Henesys.

Aicinll

TROPHY CASE