3 - 4 minute read
Victims of the 3Commas API leak are demanding refunds and an apology from the crypto trading platform after CEO Yuriy Sorokin finally admitted there had been a significant API leak from the company. The leak, which affected at least 100,000 users, resulted in unauthorized trades being executed on exchanges like Binance, Coinbase, and KuCoin. For months, 3Commas and Sorokin had denied that any hack or breach had taken place, and instead blamed the leaked APIs on customers being phished. However, Sorokin’s admission that a database of API keys shared by a hacker was legitimate has led many to accuse 3Commas of “gaslighting” users and defaming them as “bad faith actors” who “falsified evidence.”
you gonna delete these? pic.twitter.com/BwbJkJy8oC— Daniel Roberts (@readDanwrite) December 28, 2022
The admission has caused outrage among the 3Commas community, with many accusing the company of lying and attempting to cover up the true nature of the leak. Twitter user @Pledditor wrote, “Just a reminder: For the last 2 months, you have blamed the victims of the hack. You have defamed the victims as ‘bad faith actors’ and alleged they ‘falsified evidence,’ when it turns out 3Commas was the ones who were the bad faith actors, lying and falsifying evidence.” Crypto trader CoinMamba tweeted, “You kept lying and saying this was our fault instead of taking responsibility and prevented [sic] further exploits. Are you going to refund the users now?”
This whole company should be held accountable and shut down immediately— çгчpтåvэłî (@cryptaveli) December 28, 2022
The response to Sorokin’s admission has been overwhelmingly negative, with many users threatening legal action if their funds are not recovered. User @turgut_oztunc commented, “You are really funny guys. We will see [you in] the court if you don’t recover our funds asap.” The leak has resulted in significant losses for 3Commas users, with some estimates putting the total at over $12 million. It remains to be seen how the company will respond to the demands for refunds and an apology, and whether it will be able to repair its reputation in the wake of the API leak.