Crypto trading tuam txhab 3Commas tsis kam lees nws cov neeg ua haujlwm nyiag tus neeg siv API tus yuam sij, thov cov screenshots nthuav tawm hauv kev tshaj xov xwm yog cuav, thiab hais kom cov neeg siv cuam tshuam ua ntaub ntawv tub ceev xwm txhawm rau kom tsis txhob rho tawm hauv kev sib pauv.
Hauv kev tshaj tawm blog tshaj tawm rau lub Kaum Ob Hlis 11, 3Commas co-founder thiab CEO Yuriy Sorokin hais tias uas cov screenshots cuav ntawm Cloudflare cav tau nthuav tawm hauv Twitter thiab YouTube "hauv kev sim ua kom cov neeg muaj qhov tsis zoo nyob hauv 3Commas thiab peb tsis muaj lub luag haujlwm txaus los tso cai qhib nkag rau cov neeg siv cov ntaub ntawv thiab cov ntaub ntawv teev cia." Cov screenshots raug liam npaj siab los qhia tias tus neeg siv khoom API yuam sij li cas tau nthuav tawm hauv 3Commas dashboard ntawm Cloudflare.
Ib qho thib ob blog tshaj tawm los ntawm Sorokin txij Lub Kaum Ob Hlis 10, txhawb cov neeg siv cuam tshuam los ua tub ceev xwm ceeb toom txhawm rau kom tau txais nyiaj khov ntawm kev sib pauv. "Qhov no ua tiav sai dua, kev sib pauv sai dua tuaj yeem tso cov nyiaj ntawm cov neeg ua txhaum cai kom txwv tsis pub cov nyiaj rho tawm thiab ua rau muaj feem ntau ntawm cov nyiaj yuav raug xa rov qab mus rau cov neeg raug tsim txom."
Raws li feem ntau ntawm kev sib pauv crypto ua raws li paub txog koj tus neeg siv khoom tus qauv, cov neeg siv yuav tsum muab cov ntaub ntawv qhia txog tus kheej rau kev lag luam lossis rho nyiaj. Yog tias cov neeg siv cuam tshuam tau muab tub ceev xwm ceeb toom, kev sib pauv yuav tuaj yeem muab cov ntaub ntawv no rau cov neeg tshawb xyuas, sau tseg rau lub tuam txhab.
As qhia los ntawm Cointelegraph, tus tub luam crypto los ntawm lub npe CoinMamba ntawm Twitter tau kaw nws tus account ntawm Binance lub platform tom qab nws yws txog cov nyiaj poob. Tus yuam sij API leaked yog khi rau 3Commas tus account. Ob lub tuam txhab, Binance thiab 3Commas, tsis lees paub lub luag haujlwm rau qhov xwm txheej.
3Commas thov kom tau txheeb xyuas cov pov thawj ntawm phishing tawm tsam ua "kev koom tes" rau tub sab. raws li rau lub tuam txhab, kev tawm tsam phishing tau pib thaum Lub Kaum Hli, nrog cov neeg ua phem phem sim sib txawv phishing cov tswv yim. Sorokin hais tias:
"Tsis tas li ntawd, peb muaj pov thawj nyuaj uas phishing yog tsawg kawg ntawm qee qhov kev koom tes; peb tau tshaj tawm ib tsab xov xwm blog ntawm no qhia ntau lub vev xaib cuav 3Commas uas tau tsim thiab qee qhov tseem nyob hauv is taws nem, txawm tias peb siv zog ua kom lawv tshem tawm. "
Kev sib pauv API kev sib txuas laus dua 90 hnub raug kaw los ntawm lub tuam txhab.
Tau qhov twg los: https://cointelegraph.com/news/3commas-denies-staff-members-stole-api-keys