Expert verified

5 min read

Binance CEO Cautions Users About “Widespread” API Key Leaks From 3Commas

Published date:

February 2, 2026

Our Editorial Standards:

Cryptocurrencies can be volatile and high risk. Though our articles are for informational purposes only, they are written in accordance with the latest guidelines from tax agencies around the world and reviewed by certified tax professionals before publication. Learn more about our Editorial Process and Risk Warning.

Changpeng Zhao, the CEO of Binance, advised the exchanges’ clients to disable 3Commas API keys following several reports of API key leaks from the trading bot.

Earlier in October, FTX users claimed that the API keys linked to 3Commas were used to gain unauthorized access to their accounts. An investigation by the two firms revealed that hackers had used these keys to carry out trades on DMG trading pairs.

Hey guys. Unfortunately two days ago my Binance account got exploited through an API which I’ve created 2 years ago and haven’t used since which I assumed I deleted but apparently didn’t. It was used to make trades on low cap coins to push up the price to make profit.
— CoinMamba (@coinmamba) December 8, 2022

Reports of these leaks re-emerged in December when Twitter user CoinMamba reported that their Binance account was compromised through an API key exploit. After deliberations with CZ on Twitter, Binance refused to provide compensation to CoinMamba and soon blocked their account.

Get Our Free Newsletter

Subscribe to our newsletter to get tips, our favorite services, and the best deals on Bitcompare-approved picks sent to your inbox

The CEO of Binance has now acknowledged the existence of the key leaks. 3Commas CEO Yuriy Sorokin also confirmed that users’ API keys were leaked from their platform. He claimed that the firm will launch a “full investigation” involving law enforcement, adding,

“As an immediate action, we have asked that Binance, Kucoin, and other supported exchanges revoke all the keys that were connected to 3Commas.”

Meanwhile, the CEO of Binance voiced his disagreement with 3Commas’ official announcement. CZ said he believes Twitter user db’s post claiming that all of 3Commas’ leaked keys have been published.

I strongly believe @tier10k is correct here, not 3comma's official response (BS). https://t.co/gV4DxVfxUZ
— CZ Binance (@cz_binance) December 28, 2022

How we reviewed this article

All Bitcompare articles go through a rigorous review process before publication. Learn more about our Editorial Process and Risk Warning.

Ayush Pande

Written by:

Ayush Pande

Writer

As a tech enthusiast who's always on the prowl for the latest developments concerning crypto and hardware, you can find him covering news stories or tinkering with PCs.

About the Author

As a tech enthusiast who's always on the prowl for the latest developments concerning crypto and hardware, you can find him covering news stories or tinkering with PCs.

About the Author

Radica Maneva

Reviewed by:

Radica Maneva

Senior Editor

Radica is a Senior Editor at Bitcompare. She has worked for more than a decade at leading publications as an Editor across various industries, including crypto and finance.

Bitcompare is a trading name of Blue Venture Studios Pty Ltd.

Advertiser disclosure: Bitcompare is a comparison engine that relies on advertising for funding. The business opportunities that can be found on this site are offered by companies with which Bitcompare has made deals. This relationship may affect the way and where products appear on the site, such as in what order they are listed in categories. Information about products may also be placed based on other factors, such as the ranking algorithms on our website. Bitcompare does not look at or list all companies or products on the market.
‍
Editorial disclosure: The editorial content on Bitcompare is not provided by any of the companies mentioned, and has not been reviewed, approved, or otherwise endorsed by any of these entities. The opinions expressed here are the author’s alone. Additionally, the opinions expressed by the commenters do not necessarily reflect those of Bitcompare or its staff. When you leave a comment on this site, it will not show up until a Bitcompare administrator approves it.

Warning: The price of digital assets can be volatile. The value of your investment can go down or up, and you may not get back the amount invested. You are the only one who is responsible for the money you invest, and Bitcompare is not responsible for any losses you might have. Any APR shown is a rough estimate of how much cryptocurrency you will earn in rewards over the time period you choose. It does not display the actual or predicted returns or yields in any fiat currency. The APR is adjusted daily, and the estimated rewards may differ from the actual rewards generated. The information on this page is not meant to be a sign from Bitcompare that the information is correct or reliable. Before making any investment, you should carefully consider your investment experience, financial situation, investment objectives, and risk tolerance, and consult with an independent financial advisor. Links to third-party sites are not under the control of Bitcompare, and we are not responsible for the reliability or accuracy of such sites or their contents. For more information, see the Terms of Service for Bitcompare and our Risk Warning.