Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
3Commas founder and CEO Yuriy Sorokin issued an investigative update on attacks on API keys and trading platforms after many users of Binance, OKX, FTX and some other trading platforms experienced unauthorized transactions via API keys . On December 29, CoinDesk reported that the US Federal Bureau of Investigation (FBI) is investigating the 3Commas data breach. Edmundo (Mundy) Pena, leader of the roughly 60-member 3Commas victims group that has previously been in contact with the U.S. Secret Service and other law enforcement agencies, told CoinDesk he calculated the group’s losses at more than $20 million. Attack method (per SlowMist): Information Leakage. Reported loss: $20,000,000.
- chain
- —
- protocol
- 3Commas
- bug_class
- access-control
- date_occurred
- 2022-12-11
- loss_usd
- $20,000,000
- source_id
- sm:3commas::2022-12-11