{"id":171244,"date":"2023-10-10T07:09:50","date_gmt":"2023-10-10T01:39:50","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=171244"},"modified":"2023-10-10T07:09:50","modified_gmt":"2023-10-10T01:39:50","slug":"3commas-on-heightened-alert-after-several-user-accounts-hacked-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/3commas-on-heightened-alert-after-several-user-accounts-hacked-crypto-news\/","title":{"rendered":"3Commas on \u2018heightened alert\u2019 after several user accounts hacked – Crypto News"},"content":{"rendered":"
\n

Crypto trading bot provider 3Commas is on \u201cheightened alert\u201d after some of its user\u2019s accounts were compromised and used to place trades.<\/p>\n

An Oct. 8 blog post<\/a> from 3Commas co-founder and CEO Yuriy Sorokin said it received reports from users concerning unauthorized trades on their accounts after resetting their passwords. <\/p>\n

An investigation found \u201conly a few customer accounts\u201d were compromised and unauthorized trades<\/a> made. 3Commas did not disclose the number of users affected. <\/p>\n

\n

Notice of Incident. We’ve identified a security incident that has come to our attention concerning the security of 3Commas accounts. Learn more and stay secure:
Read our Blog Post: https:\/\/t.co\/sJmfzOJE49<\/a> pic.twitter.com\/MRJ40D29pj<\/a><\/p>\n

\u2014 3Commas (@3commas_io) October 8, 2023<\/a><\/p><\/blockquote>\n

\u201cWe will continue with our investigation into this matter,\u201d Sorokin wrote. \u201cPlease note, however, that in the meantime, our services are running normally, and we will continue to operate in a state of heightened alert.\u201d<\/p>\n

The accounts with unauthorized trades mostly had not enabled two-factor authentication<\/a> (2FA), according to 3Commas. It said the data accessed did not include user API data or passwords.<\/p>\n

As additional security measures, the firm said it implemented a new approach to resetting passwords and disabled API connections after a user resets their password. It recommended that users enable two-factor authentication and regularly change their password<\/a>.<\/p>\n

Related: <\/em><\/strong>OpenSea \u2018unaware\u2019 of any involvement of former exec in $60M rug pull<\/em><\/strong><\/a><\/p>\n

In December 2022, the firm disclosed an incident from that October<\/a> where user API keys had been leaked, leading to unauthorized trades on victim accounts.<\/p>\n

Sorokin and 3Commas initially denied a breach had taken place and instead suggested its customers had been phished. It later relented<\/a> and Sorokin admitted there had been an API leak from 3Commas.<\/p>\n

3Commas users affected by the API leak called for refunds<\/a> and an apology for being gaslighted.<\/p>\n

\u201cWe regret that such an incident has taken place,\u201d said Sorokin on the latest incident. He added that 3Commas is improving its security to prevent or limit similar future incidents.<\/p>\n

3Commas did not immediately respond to Cointelegraph\u2019s request for comment.<\/p>\n

Magazine: <\/em><\/strong>How to protect your crypto in a volatile market \u2014 Bitcoin OGs and experts weigh in<\/em><\/strong><\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Crypto trading bot provider 3Commas is on \u201cheightened alert\u201d after some of its user\u2019s accounts were compromised and used to place trades. An Oct. 8 blog post from 3Commas co-founder and CEO Yuriy Sorokin said it received reports from users concerning unauthorized trades on their accounts after resetting their passwords. An investigation found \u201conly a […]<\/p>\n","protected":false},"author":2,"featured_media":171245,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[235,203,210,234,231,232,237,238,236,233],"class_list":["post-171244","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain","tag-bitcoin","tag-crypto-currency","tag-elon-musk","tag-ethereum","tag-hyperledger","tag-ibm","tag-mining","tag-nodes","tag-spacex","tag-tesla"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/171244","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=171244"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/171244\/revisions"}],"predecessor-version":[{"id":171247,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/171244\/revisions\/171247"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/171245"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=171244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=171244"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=171244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}