FTX users lose millions due to API exploit by BeInCrypto

A cryptocurrency trader lost more than $1 million after hackers accessed his FTX account by exploiting the API connected to the trading account.

Chinese journalist Colin Wu The first to report the incident saying that the user noticed For the first time, his account had traded DMG tokens more than 5,000 times, only to later discover that nearly $1.6 million in FTX tokens and other cryptocurrencies had left his account.

Users told WuBlockchain that FTX notes that the 3commas API KEY was leaked, and that similar situations were not isolated cases. After the user submitted a notice to file the case with the police, FTX gave no response or froze. 3commas said there have been no leaks.

– Wu Blockchain (@WuBlockchain) Oct 21, 2022

The reporter confirmed that the accident was not isolated, as three other victims were killed. For its part, FTX claimed that the hack was due to a leak of the API keys of the 3Commas trading platform.

WuBlockchain has learned that there have been four incidents of coin theft by stealing API KEYs and contra trading in FTX. Three of those cases were related to 3Commas, which 3Commas said was due to users accessing fake websites. https://t.co/aigUYBg8bQ pic.twitter.com/oa41jofzOW

– Wu Blockchain (@WuBlockchain) October 22, 2022

Another FTX user lost $1.5 million

Another FTX user, Bruce, stated in a Twitter (NYSE:) thread on October 22nd that he was a victim of FTX exploit. revealed that He lost 1.5 million dollars About the incident that occurred on October 21.

According to Bruce, “3Commas has never been used or heard of. I have never used an API key in the past two years. I have never kept the secret in a document.”

As I know, there are more than 3 attacks before they can be stolen. My case is similar to that of Stefan Kag who stole 104. pic.twitter.com/7pi6cWX2oP

– Desert Power (@littlesand2) October 22, 2022

Furthermore, he mentioned that malicious players traded DMG through his account on October 18 and 19. He wondered why FTX does not have any control measures Risks of illegal business activities.

Then he asked how the scalper was still trading illegally on his account on October 21st. Bruce added that FTX was investigating the series of incidents.

3 spacers response to the situation

in the meantime, Cryptocurrency exchange 3Commas has denied the chargesaying that “there are several affected users who were not 3Commas customers and there is no possibility that the security breach originated with 3Commas services.”

His team initially said their security services had not been hacked, and they are looking into the matter.

3 Update the status He stated that their investigation shows that some of the API keys were Linked to new 3Commas accounts created and used for unauthorized DMG token operations.

3Commas & FTX Security Update 17:30 GMT – There are several affected users who were not 3Commas customers and there is no possibility of a security breach with 3Commas services. Investigation continues: https://t.co/ivdHo10mSr

– 3Commas (@3commas_io) October 22, 2022

These API keys were not taken from the 3Commas website. But it seems that some users mistakenly connected to websites False pretending to be 3Commas. These phishing sites took over the users API and later used it to hack FTX.

“The update also clarified that the issue affected not only 3Commas users, but also users who had never used 3Commas.”

Given the scale and complexity of the attack, we also doubt it You used third-party extensions or malware.

FTX and 3 komas They have disabled all APIs for accounts with suspicious activity and required users to create new accounts.

The post missing millions of FTX users due to an API was first seen on BeInCrypto.

Continue reading on BeInCrypto