3Commas: API key and exchange attacks are not caused by system vulnerabilities but hacker attacks, API keys that have not been used for more than 3 months will be revoked

Yuriy Sorokin, founder and CEO of trading bot platform 3Commas, released an investigative update on API keys and exchange attacks, after many users of Binance, OKX, FTX and a number of other exchanges experienced unauthorized attacks via API keys. authorized transactions. 3Commas claims to have collected a lot of information from affected users, according to which each case is different, there is no common pattern or any connection between the reported cases other than unauthorized transaction activities, and the extensive use of 3Commas’ High-net-worth individuals were not affected, suggesting it was not a vulnerability in the 3Commas system. 3Commas stated that the attack was not caused by phishing but by "hacking". 3Commas strongly recommends that any users affected by this issue report it to their local police station or cybercrime unit, so that the exchange freezes the perpetrator’s account, increasing the likelihood that some or all of the funds will be returned to the victim. The team is ready to cooperate with users, exchanges and the Estonian Police to assist the ongoing investigation to catch the attackers. Next, 3Commas will continue to work with exchanges to provide more and more secure exchange connection options, such as Fast Connect; disable old and inactive trading API connections older than 90 days; Connections provide public API keys so that they can be deleted on the exchange side to keep users safe. Additionally, all users are advised to review Transaction API Keys.