Crypto bot platform 3Commas said unauthorized account transactions occurred after password resets on a small number of customer accounts that did not enable 2FA. In 2022, 3Commas had a large-scale API key leak, which led to coin theft on FTX and Binance.