3Commas issues security alert as FTX removes API keys after hack

3Commas and FTX have conducted a joint investigation regarding user reports of unauthorized transactions on DMG trading pairs on FTX. New

Automated crypto trading bot provider 3Commas has issued a security alert after identifying certain FTX API keys used to perform unauthorized transactions for DMG cryptocurrency trading pairs on the FTX exchange.

3Commas and FTX have jointly investigated user reports of unauthorized trading in DMG trading pairs on FTX. The duo identified that the hackers were using new 3Commas accounts to perform the DMG transactions, adding that "the API keys were not mined from 3Commas but from outside the 3Commas platform".

Following investigation revealed that fraudulent websites posing as 3Commas were being used to spoof API keys as users linked their FTX accounts. The FTX API keys were then used to perform the unauthorized DMG transactions.

3Commas further suspects that hackers used third-party browser extensions and malware to steal users' API keys, adding:

"To reiterate and clarify, there were no breaches of 3Commas account security databases or API keys. This is an issue that has affected multiple users who have never been 3Commas customers, so there is no possibility that this is an API key leak from 3Commas."

FTX and 3Commas identified suspicious accounts based on user activity and suspended API keys to prevent further loss.

A set of guidelines shared by 3Commas for user security. Source: 3Commas

FTX users who have connected their accounts to 3Commas and receive a message that their API is "invalid" or "requires updating" should create new keys APIs. In such cases, 3Commas has suggested that:

"It is possible that your API details have been compromised and the API key has been deleted by FTX."

Users have the option to create a new API key on FTX and link it to their 3Commas account to avoid any disruption to active transactions.

3Commas is currently working with victims to provide assistance and...