3Commas CEO Confirms API key leak occurred after the founder of Binance issued a warning

Binance CEO Changpeng Zhao (CZ) has warned that he is “reasonably sure” that API key leaks are taking place at the cryptocurrency trade management platform 3Commas.

Mamba, there is almost no way for us to be sure users didn’t steal their own API keys. The trades were done using API keys you created. Otherwise we will just be paying for users to lose their API keys. Hope you understand.

— CZ 🔶 BNB (@cz_binance) December 9, 2022

This follows an incident on December 9, when Binance cancelled the account of a user who claimed a leaked API key tied to 3Commas was used “to make trades on low cap coins to push up the price to make profit.”

PSA

3Commas API leak has been published, if you haven't already REMOVE YOUR API KEY pic.twitter.com/yEvrxyWBIq

— db (@tier10k) December 28, 2022

3Commas CEO Yuriy Sorokin denied the allegations in a blog post, but later acknowledged that “phishing was at least in some part a contributory factor” in user losses.

1. Statement from 3Commas:

We saw the hacker’s message and can confirm that the data in the files is true. As an immediate action, we have asked that Binance, Kucoin, and other supported exchanges revoke all the keys that were connected to 3Commas.

— Yuriy Sorokin (@ysoro13) December 28, 2022

Sorokin has now confirmed the API key leak, but added that no proof was found that the leak was an inside job.

TagsBlockchainCrypto