3Commas hit with second security breach in a year

In a recent blog post, 3Commas disclosed that their internal investigation had uncovered unauthorized access to customer account data


Fit Ztudio/Shutterstock, modified by Blockworks


Trading platform 3Commas has once again come into the spotlight following the disclosure of a security breach on Sunday, affecting a number of user accounts. 

According to the release, the platform received reports from customers about unauthorized trades occurring shortly after their passwords had been reset. 

Following an internal investigation, 3Commas revealed in a blog post that there had been unauthorized access to customer account data. 

The breach is being touted as a limited one, with unauthorized trades being carried out predominantly on accounts of users who had not enabled two-factor authentication (2FA), 3Commas said.

API secret data and account passwords are said not among the compromised information. Blockworks has reached out to learn more.

In response, 3Commas said it has modified its password reset process. The platform claims to have now instituted a policy where all API connections are disabled following a password reset — intended to act as an added security layer. 

Following the incident, the company attempted to reassure its user base that it will continue to “operate in a state of heightened alert.”

The breach on Sunday is reminiscent of an earlier incident in December, where a significant leak led to the API keys of approximately 100,000 3Commas customers being posted publicly by malevolent actors. 

That incident triggered a review of the platform’s security framework, with the company seeking expertise from cybersecurity professionals.

A third related incident in October 2022 prompted former FTX CEO Sam Bankman-Fried, currently on trial for alleged fraud and money laundering charges, to reimburse $6 million to customers affected by a phishing attack.

Multiple security lapses within a year underscore the challenges faced by the trading platform in an ongoing bear market marked by increasing cyber threats.

Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.


Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Permissionless is a conference for founders, application developers, and users. Come meet the next generation of people building and using crypto.

recent research

Research Report Templates (1).png


Solana Mobile is a highly ambitious foray into the mobile consumer hardware market, seeking to open up a crypto-native distribution channel for mobile-first applications. The market for Solana Mobile devices has demonstrated a phenomenon whereby external market actors (e.g. Solana-native projects) continuously underwrite subsidies to Mobile consumers. The value of these subsidies, coming in the form of airdrops, trial programs, and exclusive NFT mints, have consistently covered the cost of the phone and generated positive returns for consumers. Given this trend in subsidies, the unit economics in the market for Mobile devices, and the initial growth rate and trajectory of sales, it should be expected that Solana mobile can clear 1M to 10M units over the coming years. As more devices circulate amongst users, Solana Mobile presents a promising venue for the emergence of killer-applications uniquely enabled by this mobile-first, crypto-native distribution channel.


Plus, a look into Lighting Labs’ newest feature


Crypto’s Wild West era is over — it’s time to embrace regulation to secure the future of digital assets


Plus, Solana has now surpassed Ethereum in trailing 30-day decentralized exchange volume


Polymarket betters say Kamala Harris has better odds than Biden of winning against Trump


Bitcoin’s down Tuesday, while ETH-correlated assets like ENS and ARB see growth