Commas on ‘high alert’ after multiple user accounts have been hacked

Crypto trading bot provider 3Comas is on “high alert” after some of its users' accounts were compromised and used to place trades.

3Komas founder and CEO Yuri Sorokin said in a blog post on October 8 that he had received reports from users about unauthorized transactions on their accounts after resetting their passwords.

The investigation found that “only a few customer accounts” were compromised and unauthorized transactions were made. 3 commas do not specify the number of affected users.

Notification of the event. We have identified a security issue that came to our attention regarding the security of 3 Commas accounts. Learn more and stay safe: read our blog post: pic.twitter.com/MRJ40D29pj

— 3 Commas (@3commas_io) October 8, 2023

“We are continuing our investigation into this matter,” Sorokin wrote. “Please note, but in the meantime, our service is working normally, and we will continue to work in extreme caution.”

Accounts with unauthorized transactions based on 3 commas do not have two-factor authentication (2FA) enabled. It said the data accessed did not include user API data or passwords.

As additional security measures, the company says it's starting to enable password resets and disable new API connections after the user resets the password. It is recommended that users enable two-factor authentication and change their passwords regularly.

Related: OpenSea ‘unaware' of former exec's involvement in $60M carpet drag

In December 2022, the organization disclosed an incident in which user API keys were leaked from October, leading to unauthorized trading on victim accounts.

Sorokin and 3Komas initially denied any breach and instead suggested that their customers had been defrauded. He later relented and admitted that Sorokin had an API leak from 3 comas.

3 Coma users affected by the API leak are demanding refunds and apologies for being gaslighted.

“We are sorry that such an incident occurred,” Sorokin said of the latest incident. He added that 3 Komas are improving their security to prevent or limit similar incidents in the future.

3 Comas did not immediately respond to Cointelegraph's request for comment.

Magazine: How to protect your crypto in a volatile market — Bitcoin OGs and experts weigh in.