This morning a large number of users are reporting issues with their accounts on Binance. Issues:
- Many people have logged in to find that all their altcoins were sold for BTC, and that many users also placed buy-orders for a specific coin at a price multiple times above its regular value.
- This is only effecting users who have issued API keys on their accounts.
- Binance has confirmed the issue stems from the API via third-party tools and is not a direct compromise issue.
Security Suggestions: If you use third-party trade bots, automation tools, portfolio trackers, or portfolio management tools that use Binance API keys you should consider:
- Disabling those accounts either on Binance or the tool itself.
- Disabling "trade" access to the API on Binance, or resetting the key.
- Disabling your API keys on any other exchange that is hooked into the same systems.
- Ensuring your 2FA is enabled, and you are using a strong and unique password.
At this time it does not seem like Binance was directly compromised in any way, but we are still awaiting official comments. We will try to keep you updated as new information develops. Edit - Update 1:
- Binance is aware of the issue and investigating.
- They have disabled withdrawals during this investigation to ensure that any compromised funds remain in their control.
