Binance CEO Changpeng Zhao (CZ) warned his Twitter followers on Dec. 28 that he was “fairly certain” that an API key at 3Commas had been leaked.
CZ’s revelation comes after an incident on Dec. 9 when Binance terminated the accounts of users who had complained about losing their money a day earlier. The user claimed that the leaked API key tied to 3Commas was used “to trade low-cost coins to push prices higher to make a profit,” which Binance refused to refund users. CZ tweeted that the loss could not be verified. and if the company compensates for such losses “We will have to pay users if they lose their API key.”
Mamba, there is almost no way for us to be sure users didn’t steal their own API keys. The trades were done using the API keys you created. Otherwise we will just be paying for users to lose their API keys. Hope you understand.
— CZ
Binance (@cz_binance) December 9, 2022
On December 11, 3Commas CEO Yuriy Sorokin said on the company blogThat fake screenshots were published on Twitter and YouTube showing that the company had weak security and employees were stealing API keys. easily that their claims are fake.”
Security issues first surfaced at 3Commas in late October. At the time, FTX issued a security alert in response to reports from users trading DMG on FTX, in which 3Commas and FTX stated that hackers had created 3Commas accounts to execute trading operations. The key is not from 3Commas, but from outside the 3Commas platform.”
inblog post Later, Sorokin admits that we have strong evidence that Phishing is used as a contributing factor in the loss of users.
Meanwhile, Twitter users have alleged that all 3Commas API keys have been leaked.
And the latest Sorokin has confirmed the leak. He added that there was no evidence of an internal leak.
The post 3Commas CEO confirms API key leak after CZ warning appeared first on Bitcoin Addict.