About the Bypass:

The last months it waspossible to bypass Mihoyo's Number and Phone protection and add a new Email or a new Number to an already secured Account without sending a verification code to the Account owner. Thus, some high value Accounts were taken over without the owners noticing it.

How it looked like:




It has been Fixed:

However I know how this bypass worked and when using it now (testing purpose) an error message will be displayed. By experimenting a bit more I come to the conclusion that the "bypass" itself now does not work without verifying the captcha anymore which leaves the bypass useless.

Unfortunately, Mihoyo again did not inform anyone about that silently fixing it, so Ill do that now.

This bypass that allowed adding a new phone number or email has been fixed.

What does that mean for you now:

Since the bypass seems to be fixed now, this means that your Accounts are now "safe" again with only one connection, i.e. either email or phone number. It will no longer be possible to steal your already secured Accounts.

However, this should not be misunderstood. If for any reason someone still has access to your email or phone, your account can still be compromised. Accordingly, I highly recommend you to continue to connect your Accounts with both options, email and phone number.