Users of Bitcoin exchanges FTX, Binance and Coinbase are alleged to have been victims of an attack using fake third-party trading bots. Binance CEO Changpeng Zhao asked traders to delete their API keys if they were shared with the third-party trading bot platform. Here are the details…
Binance CEO: Revoke third-party access
Account holders of FTX, Binance, and Coinbase, who think they have signed up to use third-party trading bots like 3Commas and Skyrex, are allegedly victims of a phishing scam, where their exchange API identifiers were stolen by malicious third parties. The attackers were thought to be using fake websites resembling the 3Commas frontend to lure account holders to share sensitive information during registration.
We seen at least 3 cases of users who shared their API key with 3rd party platforms (Skyrex and 3commas), and seen unexpected trading on their accounts. If you used such a platform before, I highly recommend you to delete your API keys just to be safe. 🙏
— CZ 🔶 Binance (@cz_binance) November 14, 2022
Binance CEO Changpeng Zhao has asked traders to delete their API keys to protect against further attacks by third-party platforms. Binance CEO Changpeng Zhao (CZ) has reported at least three cases of exchange users sharing their API keys with third-party platforms such as Skyrex and 3Commas and observing unexpected trading. Moreover, cryptocoin.com As we have also reported, he explained that the problem is not caused by the stock market. API keys authorize third parties to access user accounts for trading.
Bitcoin, ETH and FTT stolen
On October 21, Bitcoin, Ethereum and FTT were stolen from a Chinese user’s account. All stolen by third-party quantitative trading bots. Upon investigation, it was discovered that FTX users using quantitative robots for trading like 3Commas had been hacked. 3Commas argued that the quantitative robot did not leak API keys, so the breach may have occurred elsewhere.
Colin Wu, a Chinese reporter, and his team researched and found several fake 3Commas websites that were used to phishing users by copying the design of the web interface and obtaining API keys from users. API keys were then stored and used to make unauthorized trades on their partner exchanges.
Our previous coverage: Review of the whole process：3Commas API KEY ‘leak’, FTX user funds was stolen by contra trade. While focused on FTX, it also happened subsequently on Binance Coinbase. https://t.co/B9gp2M0Gba https://t.co/pjKkPTaLd9
— Wu Blockchain (@WuBlockchain) November 14, 2022
The ideal way to protect against such attacks is to delete API keys shared with third-party platforms. According to experts, if exchange accounts and other quantitative trading robots affiliated with 3Commas say that your API key is invalid or needs to be updated, your information has most likely been compromised.
Binance Coin may drop under increasing selling pressure
Meanwhile, the exchange’s coin, Binance Coin, is changing hands at $268.94 after losing 21% last week. Analysts evaluated the BNBBTC pair and identified increasing selling pressure on Binance’s native token. Crypto analyst Azeez Mustapha thinks that the price of BNB has more room for a drop as the token has dropped below the nine and 21-day moving averages. Therefore, he argues that it confirms the downward trend. As a result, traders can expect BNB price to gain support at $265.80. Unless strong buying continues, the expert predicts a drop in Binance Coin.
