A new theft of 3Commas users' data has been reported

Representatives of 3Commas, a cryptocurrency exchange based in St. Petersburg, have reported a large-scale theft of user data — hackers have gotten hold of about 100,000 API keys of the platform’s customers. According to CoinDesk, the attackers have already posted 10,000 API keys in the public domain and promised to publish the rest in the near future.

NoWorries strongly advises against trusting your data and funds to platforms affiliated with a terrorist country.

3Commas Statement:

1) We have seen the hacker's message and can confirm that the data in the files is true. As an immediate action, we have requested that Binance, Kucoin and other supported exchanges revoke all keys that were connected to 3Commas. pic.twitter.com/ZMuzCqeF1j

— 3Commas (@3commas_io) December 28, 2022

Interestingly, Binance CEO Changpeng Zhao was the first to report the data leak: «I have good reason to believe that there has been a data breach from 3Commas. If you have ever posted API keys to 3Commas (from any exchange), please disable them immediately.»

Representatives of 3Commas said that there is no evidence of information leakage through team insiders. According to the exchange’s management, an investigation into the incident has already begun. It is worth noting that the main crypto product of 3Commas is trading bots that automatically execute trades on exchanges such as Binance, Coinbase, OKX, and until recently, FTX. The service is popular because it saves users time and effort. In order for the 3Commas bot to execute trades, users must provide their API keys generated by the exchanges. This is the second time that this data has been stolen.

It is worth reminding that the previous theft of 3Commas customers' API keys, which took place in late October, was blamed on the platform’s management. Recently, a user under the name Angela Rueda posted a confirmation post on Twitter, attaching a screenshot that allegedly proves that the keys were stolen by 3Commas representatives. However, 3Commas co-founder and CEO Yuriy Sorokin denied this information and suggested that some users «conspired to act against 3Commas.»