Confirming CZ's claims, 3Commas confirms API keys leak but denies insider job
There were initial reports of security issues at 3Commas in late October when the FTX exchange issued a security alert about unauthorised trades on its platform
Image: Shutterstock
The CEO of Binance, Changpeng Zhao (more commonly known as CZ), warned his Twitter followers that he believes there have been leaks of API keys on the cryptocurrency trade management platform 3Commas.
On December 9th, Binance cancelled the account of a user who reported losing funds and claimed that a leaked API key from 3Commas had been used to manipulate the prices of low market cap coins for profit.
Binance did not reimburse the user and Changpeng Zhao, the CEO, stated that the loss was not verifiable and that if the company compensated for such losses, it would essentially be similar to paying users to lose their own API keys.
On December 11th, the CEO of 3Commas, Yuriy Sorokin, published a blog post denying allegations that the company had poor security and that employees were stealing API keys. Sorokin claimed that fake screenshots were being circulated on social media platforms and provided a technical analysis refuting the authenticity of these images.
Sorokin stated that the person who created the screenshots did a good job with HTML editing but made mistakes that proved their claims were fake.
