{"id":38055,"date":"2022-10-23T12:15:30","date_gmt":"2022-10-23T16:15:30","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=38055"},"modified":"2022-10-23T12:15:33","modified_gmt":"2022-10-23T16:15:33","slug":"3commas-warns-users-as-ftx-deletes-api-keys-after-hack","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/3commas-warns-users-as-ftx-deletes-api-keys-after-hack\/","title":{"rendered":"3Commas warns users as FTX deletes API keys after hack"},"content":{"rendered":"\n<h5 class=\"wp-block-heading\" id=\"h-after-discovering-specific-ftx-api-keys-being-used-to-conduct-illicit-trades-for-dmg-cryptocurrency-trading-pairs-on-the-ftx-exchange-automated-crypto-trading-bot-provider-3commas-issued-a-security-warning-alert\">After discovering specific FTX API keys being used to conduct illicit trades for DMG cryptocurrency trading pairs on the FTX exchange, automated <a href=\"https:\/\/coinscreed.com\/staging\/5-best-ai-crypto-trading-bot-review.html\" target=\"_blank\" rel=\"noreferrer noopener\">crypto trading bot<\/a> provider 3Commas issued a security warning alert.<\/h5>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-128.png\" alt=\"3Commas warns users as FTX deletes API keys after hack\" class=\"wp-image-38058\" width=\"715\" height=\"356\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-128.png 574w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-128-300x149.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-128-150x75.png 150w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-128-360x180.png 360w\" sizes=\"(max-width: 715px) 100vw, 715px\" \/><figcaption>3Commas warns users as FTX deletes API keys after hack<\/figcaption><\/figure>\n\n\n\n<p>In response to reports from users of illicit trades on the <a href=\"https:\/\/www.google.com\/search?q=3Commas+warns+users+as+FTX+deletes+API+keys+after+hack&rlz=1C1SQJL_enNG889NG889&oq=3Commas+warns+users+as+FTX+deletes+API+keys+after+hack&aqs=chrome..69i57.428j0j9&sourceid=chrome&ie=UTF-8\" target=\"_blank\" rel=\"noreferrer noopener\">DMG trading pairs on FTX<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>, 3Commas and FTX undertook a joint investigation. The pair said that hackers created fresh 3Commas accounts to carry out the DMG trades, and they added that &#8220;the API keys were stolen from outside the 3Commas platform&#8221; rather than from 3Commas itself.<\/p>\n\n\n\n<p>Following an investigation, it was discovered that individuals were linking their FTX accounts to fraudulent websites pretending to be 3Commas in order to obtain API credentials. The illicit DMG exchanges were then carried out using the FTX API keys.<\/p>\n\n\n\n<p>According to 3Commas, hackers may have utilized malware and third-party browser extensions to acquire users' API keys, adding:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\" id=\"h-to-reiterate-and-clarify-there-has-been-no-breach-of-either-3commas-account-security-databases-or-api-keys-this-is-an-issue-that-has-affected-multiple-users-who-have-never-been-customers-of-3commas-so-there-is-no-possibility-that-it-is-a-leak-of-api-keys-originating-from-3commas\"><p>\u201cTo reiterate and clarify, there has been no breach of either 3Commas account security <a href=\"https:\/\/coinscreed.com\/staging\/blockchain-review-solana-polygon-stellar-eos-and-tron-networks.html\" target=\"_blank\" rel=\"noreferrer noopener\">databases<\/a> or API keys. This is an issue that has affected multiple users who have never been customers of 3Commas so there is no possibility that it is a leak of API keys originating from 3Commas.\u201d<\/p><\/blockquote>\n\n\n\n<p>Based on user behavior, FTX and 3Commas both discovered suspect accounts and suspended the API keys to stop additional losses.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"670\" height=\"435\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-127.png\" alt=\"\" class=\"wp-image-38057\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-127.png 670w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-127-300x195.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-127-150x97.png 150w\" sizes=\"(max-width: 670px) 100vw, 670px\" \/><\/figure>\n\n\n\n<p>Users of FTX who have linked their accounts with 3Commas and who observe that their API is &#8220;invalid&#8221; or &#8220;needs upgrading&#8221; are required to generate new API keys. In these circumstances, 3Commas advised that:<\/p>\n\n\n\n<p>\u201cIt is possible your API details were compromised and the <a href=\"https:\/\/coinscreed.com\/staging\/three-arrows-capital-swaps-33m-staked-eth-for-ethereum.html\" target=\"_blank\" rel=\"noreferrer noopener\">API key<\/a> has been deleted by FTX.\u201d<\/p>\n\n\n\n<p>To ensure that running trades are not interrupted, users can create a new API key on FTX and link it to their 3Commas account. In order to aid the victims and learn more about the hackers, 3Commas is now collaborating with them.<\/p>\n\n\n\n<p>Recently, FTX and <a href=\"https:\/\/coinscreed.com\/staging\/binance-adds-support-of-direct-crypto-for-fiat-sales-through-visa-cards.html\" target=\"_blank\" rel=\"noreferrer noopener\">Visa <\/a>teamed up to introduce debit cards in 40 nations around the world. The collaboration enables FTX users to make purchases using debit cards that have &#8220;zero fees&#8221; and no recurring costs.<\/p>\n\n\n\n<p>The FTX token surged 7% in response to the news, briefly reaching a trading price of $25.62, as market reacted to the news.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After discovering specific FTX API keys being used to conduct illicit trades for DMG cryptocurrency trading pairs on the FTX exchange, automated crypto trading bot provider 3Commas issued a security warning alert. In response to reports from users of illicit trades on the DMG trading pairs on FTX , 3Commas and FTX undertook a joint [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":38058,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[11876,11877,778,1496],"class_list":["post-38055","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-3commas","tag-api-keys","tag-ftx","tag-hack"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-128.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/38055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=38055"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/38055\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/38058"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=38055"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=38055"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=38055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}