3Commas' API database containing ~100K API keys was breached and publicly leaked on December 28, 2022. Attackers used the stolen keys to access connected exchange accounts and drain cryptocurrency by performing unauthorized trades across Binance, KuCoin, and other platforms.

3Commas founder and CEO Yuriy Sorokin issued an investigative update on attacks on API keys and trading platforms after many users of Binance, OKX, FTX and some other trading platforms experienced unauthorized transactions via API keys . On December 29, CoinDesk reported that the US Federal Bureau of Investigation (FBI) is investigating the 3Commas data breach. Edmundo (Mundy) Pena, leader of the roughly 60-member 3Commas victims group that has previously been in contact with the U.S. Secret Service and other law enforcement agencies, told CoinDesk he calculated the group’s losses at more than $20 million.