Binance and KuCoin users connected to trading bot 3Commas hit by 100,000 API leak


  • Binance, KuCoin and other exchanges where users accessed 3Commas are targeted by a database leak.
  • Users of the trading bot generated and shared API keys with their 3Commas account to allow trading, exploiters reveal that several keys are still active. 
  • 3Commas launched a full investigation involving law enforcement and implemented new security measures to protect users. 

Binance, KuCoin and other cryptocurrency trading platforms where users granted access to trading bot 3Commas through API keys are hit by an exploit. The hacker has shared select keys from a 100,000 API key database of which most accounts are still active. The team behind the algorithmic trading bot acknowledged the hack and assured traders that new security measures are in place. 

Also read: Binance CEO Changpeng Zhao believes external factors are driving fear among BNB holders

Binance, KuCoin users of 3Commas hit by sensitive information leak

Binance, one of the largest crypto exchanges by trade volume and Seychelles-based trading platform KuCoin users are hit by an API key leak. API is short for Application Programming Interface, a set of rules describing how two applications interact with each other. In crypto trading, an API grants access to the real-time market data, trades and manages the user’s account. 

Traders on exchanges like Binance and KuCoin accessed the 3Commas trading bot and shared API keys for auto-execution of trades. The team behind the algorithmic trading platform has confirmed the leak and asked users to revoke access for 3Commas. 

Yuriy Sorokin, CEO and founder of 3Commas.io assured users that the API key leak was not an inside job. An anonymous Twitter user shared a few API keys from a database of 100,000 of which many are still active. Zach XBT, a crypto influencer shared screenshots of his conversation with the exploiter in a recent tweet.

3Commas is cooperating with law enforcement to identify the bad actor

After confirming that the 3Commas leak was not an inside job, the team behind the trading bot is working with law enforcement to identify the bad actor behind the incident. In the meanwhile the platform’s CEO recommends users revoke access granted to third-party firms for algorithmic trading through bots. 

Crypto influencers raised red flags with details of a potential API key leak constantly for weeks while the founder and the 3Commas team denied it. This is the first instance where the platform has acknowledged the exploit and shared details with users. 


Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.

If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.

FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.

The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.

Join Telegram

Recommended content


Recommended Content

Editors’ Picks

Base to decentralize further with fault proofs, testnet launch expected mid July

Base to decentralize further with fault proofs, testnet launch expected mid July

Base, Coinbase’s Layer 2 chain plans further decentralization through the launch of fault proofs and higher community participation. Fault proofs are expected to go live for Base Sepolia testnet by mid July. Base has noted a spike in usage between Q1 and Q2 with applications like Uniswap, 1inch, and Circle among others. 

More Cryptocurrencies News

These seven altcoins are down over 40% from their all-time highs, recovery likely with latest developments

These seven altcoins are down over 40% from their all-time highs, recovery likely with latest developments

Crypto market capitalization excluding Bitcoin is down 3% in the past seven days and nearly 10% in the past 30 days, per TradingView. The shrinking market capitalization indicates that capital is flowing out of altcoins, the altcoins have likely wiped out their value over time in the ongoing cycle.

More Cryptocurrencies News

Ethereum holders keep accumulating Ether ahead of ETF and new yield opportunities

Ethereum holders keep accumulating Ether ahead of ETF and new yield opportunities

Ethereum’s long-term holders have continued scooping up Ether while Bitcoin’s long-term holders shed their holdings. New yield opportunities in Ether, and the upcoming ETF are likely behind the divergence in the behavior of the long-term holders of BTC and ETH. 

More Ethereum News

Crypto trader loses over $11 million in phishing attack, exploited for Maker and Ethena tokens

Crypto trader loses over $11 million in phishing attack, exploited for Maker and Ethena tokens

Maker on-chain metrics paint a bearish picture. A wallet address suffered an exploit for 3,657 MKR tokens worth $8.7 million and 2.56 million Ethena tokens worth $2.4 million. MKR was hit by a correction and gained ground, posting 1.11% gains on Sunday. 

More Cryptocurrencies News

Bitcoin: Is BTC out of the woods?

Bitcoin: Is BTC out of the woods?

Bitcoin (BTC) appears poised for a slight decline this week, influenced by factors such as the German Government's deposit of over 1,700 BTC in exchanges, decreasing outflows in US spot ETFs, and on-chain data indicating no signs of BTC DeFi liquidation. Technical indicators suggest BTC might experience a 3% correction in the near term before continuing its upward trajectory.

Read full analysis

BTC

ETH

XRP