API

CharacterSpecific81

Don’t 3D print your seed, period. Slicers and clouds leak: OctoPrint, Prusa Connect, Creality Cloud; even API backends like DreamFactory can log job names/G-code. G-code, timelapse cams, printer flash, and backups all expose words. Use metal stamping or engrave a steel plate, add a BIP39 passphrase or Shamir split, and keep everything offline/air-gapped. If you already printed it, assume compromise and rotate. Don’t 3D print your seed, period.

AutoModerator

Post is by: Jixeco and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1o6uf6w/i_built_a_free_android_app_for_longterm_crypto/ Hey everyone, I’m a long-term crypto holder who got tired of messy spreadsheets and inaccurate ROI tracking — so I built my own app. It turned out pretty handy, and I decided to share it for free. --- 🚀 CryptoLedger: Long-Term Holder’s Ledger 📱 Play Store: https://play.google.com/store/apps/details?id=com.jixeco.cryptoledger --- What it does: - Tracks your buy/sell transactions over months or years - Calculates accurate ROI and realized profit (including partial sells) - Matches sales using a lowest-price-first rule for realistic profit/loss - Keeps everything 100% local — no login, no ads, no tracking - Works for 40+ coins (more coming soon) --- Why I made it: I couldn’t find a simple tool that shows true long-term performance without forcing me to connect wallets or pay for subscriptions. CryptoLedger doesn’t touch your funds or require API keys — it’s just a clean, offline ledger for serious hodlers. --- Planned updates: - Optional cloud sync (opt-in) - Multi-currency support - Export/reporting improvements --- If you’re into long-term investing or just want a privacy-respecting way to track your crypto performance, I’d love your feedback 🙏 I made it for myself first, but maybe it’ll help others too. ✅ Free & ad-free ✅ Local data only ✅ No signup or custody 👉 Play Store link again for convenience: https://play.google.com/store/apps/details?id=com.jixeco.cryptoledger --- TL;DR: A free, privacy-friendly ledger app for long-term crypto holders. No wallets, no ads, no tracking — just clean ROI and profit tracking. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

mrjune2040

There is no official Koinly app for iPhone, you’ve downloaded a scam version hence why it’s asking for your seed. Regardless the desktop site is the one that you should be using- you’re going to want desktop access’s to properly collate and edit your information. And FYI: Koinly is a watch-only app. At most you’re giving API access for exchange connections, for a normal on/chain wallet it’s literally just the public address

crunchyeyeball

I've not tried running your code, but what's your implementation giving you? In what way is it failing? Every time I've played around with block hashing, it's been byte ordering & big-endian versus little-endian representation which has most often tripped me up, so that's something to double check. Also, mempool.space has a useful API for getting block data, e.g.: https://mempool.space/api/block/000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f/header ...returns the block header for the genesis block: 0100000000000000000000000000000000000000000000000000000000000000000000003ba3edfd7a7b12b27ac72c3e67768f617fc81bc3888a51323a9fb8aa4b1e5e4a29ab5f49ffff001d1dac2b7c ...which gives the original block hash of (reverse byte order): 6fe28c0ab6f1b372c1a6a246ae63f74f931e8365e15a089c68d6190000000000 ...after applying SHA(SHA()).

tepmoc

Its normal as market makers usually wider their spread durring volatility or completly stops supporting market (sometimes due to API unavability but most of time they prefer not lose money)

pickleBoy2021

If the API’s are failing, and the oracles work on a delay, and you don’t know what’s in your exchanges or platforms code procedure wise you can’t complain if you get fucked. Just need to be more diligent.

pickleBoy2021

Tough to say. Tech hurricane. Basically exchanges triggered ADL for survival. Auto liquidations. Oracles work on delay so who knows what prices were happening. Plus API’s were failing. AAVE hard coded USDT price into their code to minimize issues like this. Luna panic stables unpegged and collateral set off liquidations. This was a true shitstorm of tech. Why in tradfi there are circuit breakers. https://x.com/diogenes/status/1976947177520808270?s=46&t=ig_uPatP8KlCwSQQGUWB1A https://x.com/salahghazzal/status/1977085457818079641?s=46&t=ig_uPatP8KlCwSQQGUWB1A

ColdOverYonder

My word says this was facilitated by AI. I'm sure the post required moderation. Was there lag time from submission to actual public view? If so, who saw it? Who's hooked into the API to catch this stuff? How many smaller but relatively significant wallets did the same? All a theory.

pickleBoy2021

The guy who wrote this did say on a podcast. Jump may have taken a hit due to an API issues. Not confirmed. Still alive but took a loss.

AutoModerator

Post is by: waleosikominu and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1o48ea7/hey_autonomys_fam_lets_find_our_next/ Autonomys is officially rolling out the first part of its duet campaign—and it’s a big one! From October 6–12, the HUB Community is rallying to recruit new Project Ambassadors as the network sets its sights on expanding into the Asian markets, especially China. Validators will spotlight top submissions in a special post on X, so this is your chance to shine 🌟. We’re calling on YOU to help scout talent with expertise in: - Mandarin-speaking community support - API development/integration - DAO governance & operations If you know someone who fits the bill—or you’re that someone—jump in now! Start by liking & retweeting the official callout post on X. Then, share this opportunity across Reddit, CMC, BSq, and beyond. Let’s build the future of decentralized collaboration together. Tag your posts with @AutonomysNet #AI3 and help us find the next wave of visionary Ambassadors *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

CharacterSpecific81

Your funds are only safe if execution uses your keys, allowlisted contracts, full simulation, and burner wallets for risky tasks. What I’d want OP to confirm: non-custodial by default (no keys on their servers), every tx simulated and decoded before you sign (contract, function, max spend, approvals), no infinite approvals, protocol/contract allowlists, spending caps, and one-click burner wallet creation with auto-revoke after tasks. Always require a wallet pop-up to sign (hardware wallet support), with optional Safe multisig or scoped/time-limited session keys for small actions. 2FA/passkeys should protect the account, but the account must never be able to sign on-chain-so even if email gets jacked, funds can’t move without your wallet. What I do: Fireblocks MPC for team wallets, Safe for multisig, and DreamFactory to lock down internal API calls (RBAC/OAuth) between bots and signing services. Also: use a hardware wallet, spin a fresh address per airdrop, pre-fund small, and use [revoke.cash](http://revoke.cash) to clean approvals. Bottom line: keep keys client-side, use burner wallets and simulations, and require explicit wallet confirmation for every spend.

Ashleighna99

Cheapest simple path: run a pruned Bitcoin Core wallet, derive unique deposit addresses via HD (xpub/descriptors), and use a tiny hot wallet (or PSBT flow) for withdrawals; add LNbits for Lightning if needed. Concrete setup: \- Self-host bitcoind with wallet enabled and -prune. Use getnewaddress with a per-user label for deposits; confirm via walletnotify/ZMQ. For withdrawals, use sendmany or build PSBT (walletcreatefundedpsbt) and sign on a hardware wallet if you want less hot-wallet risk. \- If you prefer watch-only: import descriptors from an xpub (importmulti), derive addresses server-side, and track UTXOs; only bring online keys for small withdrawal float. \- For Lightning: LNbits is the easiest API-first option; Core Lightning or LND work too, and Voltage can host if you don’t want ops. Handle fees with estimatesmartfee and allow RBF; schedule UTXO consolidation to avoid dust. \- I’ve used QuickNode and LNbits, and wrapped bitcoind/LND RPC behind DreamFactory to expose REST endpoints with auth and quotas. Bottom line: Bitcoin Core + HD addresses + PSBT (plus LNbits for LN) keeps it simple and cheap.

Xop114

This wasn’t just a "Crypto Dump" I just happened to be checking out IP in real time at the time of the drop from 8.00 to 1.20 it was wild.... it looked like a coordinated liquidity reset disguised as news. The ‘Trump–China tariff’ headline wasn’t the cause, it was the excuse.. the perfect timed event to dump crypto and create a textbook whale buying opportunity. Open interest and funding were maxed, retail was overloaded on leverage, and everyone was hyped for the Q4 bull run. Then that headline hit, every exchange started lagging, orders wouldn’t place, charts froze, and retail got locked out while deep-pocket API desks and institutions stayed connected and scooped everything 60–80 % cheaper. Now were all Patiently waiting in the RED or Hopefully some of us are also scooping what we can now at a mild(er) discount...

Xop114

This wasn’t just a "Crypto Dump" I just happened to be checking out IP in real time at the time of the drop from 8.00 to 1.20 it was wild.... it looked like a coordinated liquidity reset disguised as news. The ‘Trump–China tariff’ headline wasn’t the cause, it was the excuse.. the perfect timed event to dump crypto and create a textbook whale buying opportunity. Open interest and funding were maxed, retail was overloaded on leverage, and everyone was hyped for the Q4 bull run. Then that headline hit, every exchange started lagging, orders wouldn’t place, charts froze, and retail got locked out while deep-pocket API desks and institutions stayed connected and scooped everything 60–80 % cheaper. Now were all Patiently waiting in the RED or Hopefully some of us are also scooping what we can now at a mild(er) discount...

AutoModerator

Post is by: walkays45 and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1o3i6zv/autonomys_is_growing_and_we_need_you_on_the_team/ Hey Autonomys fam! Big news — our network is heading into Asia, starting with China, and we’re looking for passionate people to help make it happen! 🚀 From October 6–12, the Autonomys HUB Community is kicking off a major Ambassador drive — and this is your chance to get in early. If you speak Mandarin, love building connections, or have experience with API integration or DAO governance, we want you! Here’s how to join: 1️⃣ Like & Retweet the official Autonomys post on X. 2️⃣ Read about the Ambassador Program. 3️⃣ Write a short post (100–300 words) summarizing the latest from Autonomys. You might even get your work featured in a special community post! Let’s help Autonomys build its presence across Asia — together. Follow @AutonomysNet and tag your post with #AI3 *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

roy_shen

curious what tools do you currently use for TA? anything in particular you feel like not working right now? we're actually exploring on this direction. but my gut feeling is this should be built by another team, powered by Surf's chat API and data hub API in the future.

riscten

Yes that's possible, but you'll need to script it yourself using [Apps Scripts](https://developers.google.com/apps-script/guides/sheets) and the [Mempool API](https://mempool.space/docs/api/rest).

hduynam99

Looks cool, just tried it: This is just my honest opinion: It took quite some time to search all the data, about 5 minutes. I get that, but it’s a long wait for a chat response. Maybe change the way you chat with AI. You could make a question, and your app sends an email or PDF of that analysis to the user. Furthermore, the way it analyzes based on other influences from posts, AI can’t tell which one is good; they just choose the most repeated trend words in those posts and respond with out confirming. It’s like using the OpenAI API with research mode, pulling in other data API sources, inputting some logic training, and responding. I don’t know, it kinda seems biased.

lacksfish

The reply to /u/codemonkey745 basically has all the info which I could have given you. If you need any further help feel free to ask me but I'd also suggest diving into wallet-recovery-tool and getting it to run. Make sure to check browser console messages for errors and see if the required insight API urls are active. See: https://github.com/blocktrail/wallet-recovery-tool/blob/master/src/js/app.js#L101 I also recall building this so you could run your own HTTP API and bridge the data requests of the recovery towards an active electrum node 👍🏼 In such case replace the API url with your own ... That's the idea :) See here: https://github.com/btccom/wallet-recovery-data-bridge All the best

Decent-Mistake-3207

The cleanest setup is a tax app for per-lot cost basis plus a wallet that supports labels and coin control, then automate imports from Strike and your cold wallet. Export Strike’s monthly CSVs and import them into Koinly or CoinTracker, then add your cold wallet as a watch-only via xpub so self-transfers auto-match and don’t trigger gains. In Sparrow or Specter, label each receive with date, source Strike, fiat cost, and fee so you can later pick exact UTXOs when you sell. Pick a cost basis method your jurisdiction allows; in the US, FIFO or specific ID both work, but specific ID only if you keep solid records and actually select those UTXOs when spending. Add buy fees to basis; for self-transfers, most software will treat the miner fee as a disposal cost, so review that setting monthly. Keep a single spreadsheet as a source of truth with lot ID, txid, sats, fiat, and notes, and reconcile it once a month. I use Koinly for tax reports and Notion for lot notes; if you want to pipe Strike CSVs and xpub data into your own database, DreamFactory can sit in the middle as an API layer. Bottom line: tax app + wallet labels/coin control + monthly CSV and xpub imports keeps your cost basis tight for years.

codemonkey745

Gemini has this info.... **BlockTrail** was a company founded in 2014 in Amsterdam, Netherlands, that provided key services for the Bitcoin ecosystem, including a **Bitcoin wallet**, a **developer platform (API)**, and a **block explorer**. The original BlockTrail service is **no longer active** under its original name, as the company was **acquired by Bitmain in July 2016** and subsequently **rebranded to BTC.com**. The services were merged into the [BTC.com](http://BTC.com) platform. The wallet service associated with BlockTrail/BTC.com was officially discontinued in April 2022. # Key Services of the Original BlockTrail * **Bitcoin Wallet** 🛡️: This non-custodial wallet focused on security and control, utilizing **2-of-3 Multi-Signature** (MultiSig) and **Hierarchical Deterministic** (HD) wallet technology. Users retained full control over their private keys, and transactions were signed locally on the user's device. Asking a bit further reveals some more info about recovery.... # Step 1: Use the Official Blocktrail Recovery Tool (Recommended) The standard and intended way to recover the funds from this type of backup is to use the original Blocktrail recovery tool, which runs in your web browser. 1. **Go to the Recovery Website:** The document itself instructs users to go to `https://recovery.blocktrail.com`. * **Note:** While the Blocktrail wallet service has been discontinued, the recovery tool is generally maintained for users with these backups. 2. **Begin Recovery:** Click the option to "Begin Recovery." 3. **Input Your Data:** You will be prompted to enter the information from your paper backup into the tool. This will include: * The **Wallet Identifier (v3)**. * The **Encrypted Primary Seed** (the long string of words). * The **Backup Seed** (another string of words). * The **Encrypted Recovery Secret** (another string of words). * Your **Original Wallet Password** (the password you set when you created the wallet). * You may also be able to **scan the QR code** on your backup sheet instead of manually inputting the lengthy encrypted seeds. 4. **Decrypt and Discover Funds:** The tool will use the entered data and your password to decrypt the seeds and scan the blockchain for funds associated with your wallet addresses. 5. **Sweep the Funds:** Once funds are found, the tool will let you create a transaction to send (or "sweep") all the recovered cryptocurrency to a **new, secure wallet address** that you control (e.g., a new Ledger, Trezor, or modern software wallet).

Mental-Paramedic-422

If you didn’t generate the keys yourself, it isn’t your bitcoin. Casascius-style coins are only legit if the hologram is intact and the visible address is funded; peel only to sweep into your hardware wallet. With Blockstream API and Zapier alerts, I once used DreamFactory to wrap watch-only endpoints. Bottom line: only keys you create and hold count.

Away_Painting_7128

Not your keys not your coins. Reset your API and wait for now...

Key-Boat-7519

Your data on Web3 is only as safe as your key management, approval habits, and the off-chain stuff you connect to. My playbook: split wallets (burner for mints, hot for daily, cold vault on a Ledger/Trezor), use Safe with 2-of-3 for anything that hurts to lose, and turn on the passphrase/25th word on hardware. Never grant unlimited approvals; set exact amounts and regularly clear with [revoke.cash](http://revoke.cash) or Etherscan’s token approvals. Use a simulator wallet like Rabby or Pocket Universe to spot drainers before you sign. Lock exchange logins with hardware keys (FIDO2), not SMS; add a carrier port-out PIN. For privacy, assume on-chain is public; if you must store sensitive stuff off-chain (IPFS/Arweave), encrypt first (Lit Protocol works). Set address alerts on Etherscan or Tenderly so you know fast if something moves. For ops: I’ve used Safe and Alchemy for wallet/RPC hygiene, and DreamFactory to expose a read-only API with RBAC to off-chain data so a compromised dapp can’t yank everything. Security comes from strict key hygiene, segmented wallets, limited approvals, and cautious infra, not the word “decentralized.

Ashercn97

Poly offers a public-facing API (actually two!) CLOB and Gamma. This uses the Gamma API.

Mission_Department12

Yes and its 500+ advertisers and 40+ API partnerships are crafting unbreakable Web3 ad infrastructure.

AutoModerator

Post is by: Wrong_Wrongdoer_6455 and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1nyiuuj/created_a_real_time_signal_dashboard_that_pulls/ Over the last 3+ years, I’ve been building a full data pipeline that connects to my archive Ethereum node. It pulls **every transaction** on Ethereum mainnet, finds the **balance change for every trader at the transaction level** (not just the end-of-block balance), and determines whether they bought or sold. From there, it runs trade cycles using **FIFO (first in, first out)** to calculate each trader’s **ROI, Sharpe ratio, profit, win rate,** and more. After building everything on historical data, I optimized it to now run on **live data** — it scores and ranks every trader who has made at least 5 buys and 5 sells in the last 11 months. After filtering by all these metrics and finding the best of the best out of 500k+ wallets, my system surfaced around **1,900 traders truly worth following**. The lowest ROI among them is **12%**, and anything above that can generate signals. I’ve also finished the **website and dashboard**, all connected to my PostgreSQL database. The platform includes ranked lists: **Ultra Elites, Elites, Whales, and Growth traders** — filtering through **30 million+ wallets** to surface just those 1,900 across 4 refined tiers. If you’d like to become a **beta tester**, and you have trading or Python/coding experience, I’d love your help finding bugs and giving feedback. I opened **25 seats** for the general public, if you message me directly, I won’t charge you for access just want looking for like-minded interested people— I’m looking for skilled testers who want to experiment with **automated execution through the API** I built. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

002_timmy

# Why did we build Vertical Studio? AI model customization is broken. It’s, expensive, slow and way to technical, leaving it only to a select few. We aim to break this barrier by simplifying the process and making it cheaper.  With **Vertical Studio**, anyone can: ✅ Have a conversation with our own AI who will guide you through the process ✅ Import different format files (csv, json, txt) and let our Dataset Creation Agent structure it automatically ✅ Adjust model behavior using a simple, AI generated system prompt ✅ Train a fully functional AI model in minutes, we take care of the coding ✅ Deploy it via API or list it in our marketplace Vertical Stream This isn’t a wrapper around OpenAI, it’s **real model customization**, running on decentralized compute. # We’re Powered by Real Token Utility The **$VERTAI** token isn’t just for show, it powers the entire platform: * 15% discount on credits when paying with $VERTAI * Stake tokens to receive platform credits * Lock tokens to unlock affiliate revenue tiers (5–20%) * 10% of profits earned by $VERTAI are burned every quarter * Fully MiCAR-ready utility token # Where We’re Headed We’ve already passed: * 👥 55,000 registered users * ⚡ 600,000+ prompts generated * 💰 Real, recurring revenue Next up: * Vertical Studio v2 including Levangie Labs knowledge graph technology [(more info here)](https://x.com/Build_Vertical/status/1956405434304131261) * Mobile app * CEX listing * First $VERTAI token burn * Self-hosted GPU software

Key-Boat-7519

If you’re holding long term, move to a hardware wallet and practice a full recovery before sending the full amount. For devices: Trezor Safe 3 (open-source, easy UI), Ledger Nano S Plus (secure element, broad app support), or Coldcard/Blockstream Jade (more advanced, great with Sparrow). Buy direct, verify firmware, and set a PIN. Consider a passphrase (25th word) only if you truly understand it and can back it up separately. Do a loss drill: wipe the device, recover from the seed, confirm your receive address matches a watch-only wallet (Sparrow/BlueWallet via xpub). Make two metal backups of the seed stored in different places; never digital. For exchange withdrawals, use TOTP (not SMS), withdrawal whitelist, and a hardware security key; lock your mobile account with a carrier PIN. At work we use Cloudflare Zero Trust for access controls and Bitwarden for secrets, and DreamFactory to gate API keys and roles; same least-privilege mindset keeps your crypto safer. Bottom line: get a reputable hardware wallet, drill recovery, and keep the seed offline.

AutoModerator

Post is by: One_Storm_653 and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1nvpwqo/circulating_supply_and_respective_monthtly_ath/ Hello Ive been searching for the following data for several cryptos. I need to find out how many tokens were circulating when one specific crypto reached their monthly or yearly ATH. The reasonning behind is that there is no point of hoping for an ATH of 100 USD for a specific coin when at the time the currency had 1000 tokens (JUST AN EXAMPLE) and the same currency has now 10 000 000 token circulating. All the AI tools send me to coingecko but it seems i need to pay for their API without even knowing if they will provide the data. Does anyone know where to get the information please ? Thx *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

IfOnlyAi

These numbers are pulled directly from the CoinGecko API — opens on Jan 1, closes on Dec 31. Not AI guesses, just raw data.

Key-Boat-7519

Skip paper wallets and 3D-printed “biscuits”; get an air-gapped hardware wallet and back up the seed on steel, ideally with 2-of-3 multisig. Practical setup: buy two different brands (e.g., Coldcard plus Trezor or Keystone) directly from vendors. Generate seeds offline; if you add a BIP39 passphrase, store it separately and treat it like a second key. Stamp the seed on stainless, not paper or plastic. Restore the seed on the device to verify it reproduces the same xpub and first receive address. Create a watch-only wallet (Sparrow or BlueWallet) on a clean device to generate receive addresses without exposing keys. Test with a small send, then migrate in chunks. Store each key’s steel in different locations; document derivation paths, device model, and basic recovery steps for your future self. If you insist on “paper,” only do dice-based entropy with an offline tool like SeedSigner and sweep soon after. On security hygiene, we use Yubico for auth, Bitwarden with hardware keys for secrets, and DreamFactory to gate internal API access in least-privilege workflows. Bottom line: skip paper/plastic; go hardware wallet + metal backup, preferably multisig.

Key-Boat-7519

Set up an auto-renter: poll energy and fire an API call to rent or delegate the moment you drop below a set threshold. Use TronWeb + TronGrid to check getAccountResource every 30–60s, then call tr.energy’s order endpoint with your bot address as receiver; if it fails, delegate from a separate Stake 2.0 resource wallet you keep staked for overflow. I’ve used n8n for the scheduler and TronGrid for stats, and DreamFactory just wrapped my scripts into a simple REST hook with auth so everything stayed tidy. API-based auto-rent or delegation kills the manual grind.

IfOnlyAi

The numbers aren’t made up — we pull the BTC price directly from the **CoinGecko API**, using the exact date the user enters. For example, on **May 1, 2013**, BTC was **$117** $3.59M ÷ $117 = **30,683 BTC**, which is over **$3.6B** today. The AI just tells the story. The price data and math? 100% real.

Helpful_Ad_9447

That’s exactly the pain point I’ve been hitting. Freezing works fine when you’re only moving funds here and there, but once you scale up, it feels impossible to keep up manually. An automated API-based energy rental would honestly be perfect - I’ve been wondering if services like tr energy are moving in that direction, but haven’t tested it myself yet. Totally agree, it’s the automation that’s missing right now.

AutoModerator

Post is by: Decent_Feature_9060 and the url/text [ ](https://goo.gl/GP6ppk)is: http://app.klinkfinance.com In Web3, credibility is earned the hard way. Platforms come and go, promises get made, but only a few build the type of infrastructure that top players actually adopt. That is what makes Klink’s story stand out. With Ledger and Coinbase already listed as clients, the question practically writes itself: what does Klink’s API deliver that even the giants cannot ignore? ## From Gamification to Infrastructure Klink is often recognized for its consumer-facing platform that offers gamified earning, quests, and rewards. Yet beneath the surface is something more powerful: an API designed for businesses. It allows companies to integrate ready-made engagement tools directly into their own ecosystems. This infrastructure provides partners with offerwalls, social tasks, and quests that can be embedded seamlessly. It also supports multi-currency reward distribution and analytics dashboards that show what drives user engagement. For B2B partners, the value is clear. This is not just about fun mechanics; it is about retention, acquisition efficiency, and monetization. ## Why Ledger and Coinbase Care Ledger and Coinbase do not partner with just anyone. Both firms are known for scale, security, and long-term trust. Their adoption of the Klink API demonstrates its maturity and enterprise readiness. Ledger needs ways to engage users beyond cold storage. Klink offers a streamlined path to incentivize education, wallet activity, and interaction without building a new system from scratch. Coinbase, with its vast user base, faces the challenge of keeping customers active. By leveraging Klink’s API, it can transform passive users into loyal participants through targeted rewards. For these partners, Klink is not a novelty. It is an operational tool that strengthens their ecosystems. ## Infrastructure That Scales The Klink API is attractive because it scales easily. It is compliant under European virtual currency frameworks, it functions across web, Android, and iOS, and it includes token-based enhancements through $KLINK for advanced features and staking rewards. For many businesses, the decision is simple: why spend time building a rewards engine from the ground up when Klink already provides one that works? ## Validation Through Elite Partners In Web3, talk is cheap. Whitepapers are easy to draft, but validation comes when respected players adopt your technology. Ledger and Coinbase serve as proof that Klink is more than an experiment. Their involvement signals that the infrastructure works at scale, meets enterprise standards, and solves real business problems. ## The Future of Rewards Infrastructure Zooming out, Klink is laying the groundwork for reward-driven engagement in Web3. Traditional loyalty was measured in coupons and points. Now value can be tokenized, gamified, and distributed globally. Ledger and Coinbase are not joining out of curiosity. They see where the industry is heading: a world in which financial services do not only store value but reward participation. The momentum extends beyond partnerships. Klink recently launched a campaign that puts the spotlight on its upcoming exchange presence. A $1,000 $KLINK giveaway invites the community to guess the next exchange listing by tagging a CEX, a crypto thought leader, and a friend. Four winners will be announced in October. It is a playful example of how the company blends engagement with marketing, while reinforcing community involvement. ## Final Word The fact that Ledger and Coinbase are already clients is more than a milestone. It is proof that Klink has moved from ambitious startup to trusted infrastructure provider. For any project, app, or platform looking to add scalable, crypto-powered rewards, the real question is no longer why use Klink’s API. It is why you have not already. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

GreemBeam

I've been using it to trade BTCUSD as well as accumulate spot ASTER, it works really well for both of these use cases currently. Due to the way I trade (cross position margin scaling in and out, also API connectivity) it's more usable for me as opposed to Avantis which doesn't support anything I want to do.

libtardigrade

I think although they may not be a scam exchange per se, they are very sketchy and implement crooked practices. I've had coins trapped there for over a year and I've had to give up because they keep asking for more verification of the source of the funds. The funds came from Kucoin peeps, not from some sketchy wallet--and surely they can see that. Doesn't matter, I get blocked every time I try to do anything there. Moreover, their login procedure is unnecessarily cumbersome. I can't even download my financial history, and their API sucks as well. IMO either they are so paranoid about the source of their deposits that it makes the experience shitty, or they are just shady AF. Either way I recommend staying far away from them.

riscten

Apple pay only has apple cash in the US. That's the only place where it can be used for P2P money transfers. Apple pay cannot be used for cheap, near instantaneous international transfers. Apple pay doesn't even have an API to automate payments, it is not programmable. And most importantly, Apple pat cannot be used for sovereign money ownership. Apple pay can't even do payments 1x better than its direct competitor, Google Pay.

Lufia321

Yes, it really depends on the exchange but I'm pretty sure CTC has Coinbase. I forgot that's another benefit to Koinly, it has more exchanges, I'd still use CTC. You just add the API, it gives you instructions on how to do this. Then you just refresh it to add new transactions, it adds them automatically. The only time you have issues is if you have transactions from other sources and haven't added everything.

LylafcoLobelia

Using CoinGecko's API! Stack is Next.js & FastAPI. Just sharing wiwithh a few friends foor now.

whatwilly0ubuild

CoinStats isn't a scam, they're a legit company that's been around since like 2017. That said, our clients in the crypto space deal with this shit daily. The real question isn't whether they're legit, it's whether you're cool with the security tradeoffs you're making. When you connect exchanges via API, you're basically giving them read access to your account data. Most platforms like CoinStats use read-only API keys which is fine, but here's what actually matters, make sure you're ONLY giving read permissions, never trade or withdrawal permissions. Double check those API settings on each exchange before you connect anything. The syncing issues you mentioned are real. API rate limits from exchanges can cause delays, and sometimes the data gets stale if their infrastructure is having a rough day. Not a huge deal for portfolio tracking but definitely annoying if you're trying to make quick decisions. From a security standpoint, the bigger concern is that you're concentrating all your portfolio data in one place. If someone compromises your CoinStats account, they now have a complete map of everything you own. Enable 2FA on CoinStats itself, use a unique password, the whole deal. For our customers building decentralized apps, we usually recommend they track their own data locally or use open-source alternatives where you can verify the code. Tools like Rotki let you self-host everything which is way better for security, but it's also more of a pain in the ass to set up. The main thing is understanding the tradeoff, convenience vs security. CoinStats works fine for most people who just want to see their portfolio in one place, but if you're holding serious amounts or working with sensitive DeFi positions, you might want something with more control. And whatever you do, never connect anything with withdrawal permissions enabled, that's just asking for trouble.

croholdr

you place the order once, and if its a limit order you can set take profit/stop loss in the same form; its optional. you set the price for your entry. you can manually close it. the fees are something like .0012%. You can option to not use any leverage by setting it to 1x leverage. i've tried 'automated' trading. works if the market behaves the way you predict and so long as the API , your tech and the its internet connection is functioning normally. too many markets diludes your efficency.

ContentKitchen3667

If you are just getting started in crypto, the best approach is to begin with tools that make the process simple and safe. One option worth looking into is Safetrade AI Bot. It’s designed for both spot and futures trading and connects directly to your own wallet or exchange through secure API connections. That means your funds always remain under your control — you never deposit into the bot itself. The advantage is that it uses advanced strategies like trend-following, scalping and volatility tracking to help you trade more effectively without needing to sit in front of charts all day. It’s especially useful for beginners because it automates much of the decision-making while still letting you set your own parameters. Of course as with any investment, start with an amount you are comfortable with and focus on learning along the way. But if you want a guided entry into the crypto space with solid technology backing you, Safetrade AI Bot can be a great place to begin

daivergence

I recommend using Pond3r I absolutely LOVE IT. This is like an advanced no-code Dune analytics that can deliver to data code and automatice reports. You can also get the API which is very helpful for both agents and apps

Azzuro-x

Coingecko is obviously encouraging people to use their API since it is one of their services. I am pretty sure you could update your devices to which you have physical access however the question is concerning the ones you've sold. Wouldn't a server based solution be better - more precisely your devices talking to a server *you control* which in turn retrieve data from Coingecko in the background ?

Azzuro-x

What is the plan if Coingecko changes their API settings ?

Single_Mushroom9283

>So far I have looked into the big ones like CoinMarketCap or CoinGecko, but all of them do not include historic price data and require premium subscriptions. Hey, from the [CoinGecko API Pricing page](https://www.coingecko.com/en/api/pricing), the Demo API provides 1 year of historical daily and hourly data (Price, Mcap, etc) for free. It works for both aggregated data on CoinGecko and also onchain DEX data via GeckoTerminal. But you're right on [CMC API](https://coinmarketcap.com/api/pricing/), it doesn't provide historical data for free.

Fun-Information78

I’ve got a bot running on TRON that processes 50+ transactions daily, and manually freezing TRX to get energy just isn’t scalable anymore. It’s fine for occasional use, but for automation, it’s a nightmare. I’ve been searching for a way to automate energy top-ups without having to constantly monitor resource levels. Ideally, I’d love something with an API that integrates directly with my scripts. If anyone’s found a reliable solution for this kind of setup, I’d love to hear about it.

No_House_3367

1. Verify the wallet address Open Wasabi Wallet → create/copy a receiving address. - Make sure the address starts with \`bc1...\` (SegWit address). It’s recommended to generate a new address and test again. 2. Check the withdrawal amount- Ensure that the amount you want to withdraw is greater than the network fee requirement Generally, it should be at least 0.0001 BTCo initiate successfully. 3. Contact Cudo Miner support- Go to the \[Cudo Miner Support page\](https://www.cudominer.com/contact/) or join their Discord/Telegram community. Provide a screenshot of the error + your wallet address (do \*\*not\*\* share your private key!). - Mention the error “apiErrors.500” so they can check the backend logs. 4. Try using another withdrawal address- If Wasabi addresses are not supported, you can first withdraw to a mainstream wallet (such as Exodus, Electrum, or Trust Wallet) and then transfer from there to Wasabi. This is a common intermediate solution. 5. Wait for system fix- If it’s indeed a Cudo API issue, you may need to wait until their technical team resolves it.

sgtslaughterTV

I think the fastest API I've seen belongs to the website "cryptocompare," but if I'm being honest it also is not cheap.

AutoModerator

Post is by: NekkoBea and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1neke1h/looking_for_a_reliable_api_for_crypto_trading_in/ I’m experimenting with algorithmic trading bots. Most APIs I found are tied to Binance or Bybit, but they’re in USDT. Anyone know an INR API for spot trading? I’m experimenting with algorithmic trading bots. Most APIs I found are tied to Binance or Bybit, but they’re in USDT. Anyone know an INR API for spot trading? *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

drunkenhealls22

So i wouldn't these are locks but this is what im looking at tonight. Avantis,mamo, (these three are tied to the guy who beat Elon as richest man...could be something?)UMA,API3,BAND and then im also looking at spark. I havent charted these and these are not my real investments. Just saying im a gambler and i hit when on what no one talks about so far this year

RefrigeratorLow1259

Based on the technical details provided and the architecture of Cardano wallets, you are correct: Cardano isn't specifically targeted by this exact attack. Here's why: No window.ethereum equivalent: The malicious code in this particular attack specifically targets the window.ethereum JavaScript object, which is an API standard for interacting with the Ethereum Virtual Machine (EVM). Cardano wallets, which are built on a different architecture (e.g., UTxO, Haskell-based), do not use this object. Different development frameworks: The primary development libraries and toolchains for Cardano are often in languages like Haskell or Rust. While JavaScript SDKs like @cardano-sdk/wallet and cardano-wallet-js exist, they are not based on the EVM and do not use the window.ethereum object to interact with the blockchain. Therefore, the specific malicious payload that caused this recent panic would not affect a Cardano wallet. However, it is crucial to understand that Cardano wallets are not immune to supply-chain attacks in general. If a Cardano wallet developer were to use a different compromised library from npm, for example, it could be just as vulnerable. This incident serves as a stark reminder for all software wallets to vet their third-party dependencies rigorously.

coinfeeds-bot

tldr; SwissBorg, a Swiss crypto wealth management platform, suffered a hack resulting in the theft of 193,000 Solana (SOL) tokens worth $41 million. The breach occurred due to a vulnerability in the API of its staking partner, Kiln. Only users of SwissBorg's Solana Earn program were affected, accounting for 1% of its customer base. SwissBorg pledged to reimburse affected users and is collaborating with agencies and exchanges for investigation. The company remains financially stable, and daily operations are unaffected. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.

Mission-Shoulder6279

Security Guardrails for UIGent Data isolation: Each service runs in isolated Docker containers with dedicated Redis databases (0/1) and PostgreSQL schemas, preventing cross-contamination between users' data flows. Credential management: API keys and tokens are never stored in generated code - they're injected at runtime through environment variables managed by the orchestrator service, with MinIO providing encrypted artifact storage. Read-only normalization: Forge only generates read-safe SDK wrappers and tool catalogs - it never directly executes against user APIs, that's handled by the sandboxed Atlas workers with resource limits (3GB RAM, timeout controls). Deterministic outputs: Content-addressable spec IDs ensure reproducible, auditable transformations - users can verify exactly what code was generated from their API docs. Zero-persistence execution: Atlas workers execute in ephemeral environments with ARQ job TTLs, ensuring sensitive data isn't retained beyond the immediate workflow execution.

Mission-Shoulder6279

Most basic example that comes to mind is our main demo with defi llama. They ahave a LOT of data and their API is not the simplest (nor is it written in the best way possible🤣) took us less than a day to fully agentify it and you can now process pretty complex requests through our demo that would take quite some time with the actual defi llama app or api. For example complex data dashboards, analytics, comparisons, even mini games We tried a prompt that gave us a snake game where u could play either as raydium or pumpswap and the speed of the snake was different in correlation to the change of volume over the past week

leaflavaplanetmoss

OP neglected to mention that Chainalysis traced the wallet address to having taken in or sent funds out to a mixer, two sanctioned exchanges, and a scam address, according to a later tweet I'm the same thread. The mixer and the scam address are less of a concern, but exposure to sanctioned entities is often a no-go, even indirectly, since routing your transfers through multiple hops is trivial. However, the project should really have screened for unsupportable exposure before having accepted any funds from the wallet by screening the wallet when it connected to the front end. However, since you could still technically call the smart contract directly and avoid the UI, it could use something like Chainlink to connect to a blockchain risk API like Chainalysis and have the smart contract execute the screening code directly. That would let the contract fail any transaction attempt from an unsupportable address.

Mission-Shoulder6279

Right now UI\_UI isn’t locked into a single giant model like Gemini or ChatGPT. Instead, it uses a hybrid setup: open-source foundation models (like LLaMA derivatives) fine-tuned for UI interaction, plus specialized tools like OCR, headless browsers, and Python runtimes inside the micro-VMs. That means the “AI” isn’t just a chatbot API — it’s an agent that can actually read a site, write code, and take actions. And because the stack is modular, the team can swap in stronger models as they evolve, without being tied to any one provider.

Mission-Shoulder6279

Awesome question — happy you’re here! Right now, UI\_UI runs as a dedicated platform — kind of like a command center where you give natural language instructions, and agents handle everything from web tasks to API calls inside secure micro‑VMs. But a browser extension is coming soon, too. That’ll let you bring agents directly into the websites you’re already using — so instead of switching platforms, you’ll be able to activate an agent *in context*, right on the page you’re on. As for personal authentication — UI\_UI handles that securely. You can pass API keys, connect wallets, or do one-time auth flows, and the agents will use those credentials inside the isolated VM just for your task. No data leaks, no re-use — just private, controlled execution.

My_Man_Tyrone

Kraken Pro with an API script but that isn't "easy"

whatwilly0ubuild

Cross-chain transaction debugging tools are absolutely terrible right now. I work at an engineering consultancy and we see this shit daily with our clients building DeFi protocols and wallet infrastructure. The current landscape is a mess of block explorers that don't talk to each other, transaction traces that stop at bridge contracts, and debugging workflows that require like 6 different tools just to figure out why a transaction failed across chains. Etherscan, Polygonscan, whatever, they're all isolated silos. What I really want is something that can trace a transaction from start to finish across multiple chains and show you the actual execution flow. Like if I bridge USDC from Ethereum to Polygon and something breaks, I want to see the entire path, not just fragments. The closest thing is Tenderly but it doesn't handle cross-chain scenarios well and their API is expensive as hell for production use. Another gap is real MEV monitoring for regular users. Sure, flashbots has dashboards for searchers but normal people getting rekt by sandwich attacks have no visibility into what happened. Our customers who build trading interfaces constantly ask about this. They want to show users when they got MEV'd and by how much, but there's no good API that covers all the different MEV types across chains. Portfolio tracking is oversaturated but they all suck at DeFi positions. They can handle basic token balances but try tracking your actual PnL from liquidity providing across multiple pools and protocols and they fall apart. The math gets complex with impermanent loss, reward tokens, and compounding, and most tools just give up or show wrong numbers. Smart contract testing and simulation tools are getting better but still pretty clunky. Most teams try to duct-tape these systems together with Foundry and some custom scripts but there's definitely room for something more integrated. Especially for testing upgrade scenarios and cross-protocol interactions. The one thing that's almost there but not quite is decent alerting infrastructure. You can set up basic price alerts everywhere but try setting up alerts for smart contract events, unusual transaction patterns, or governance proposals and you're back to building custom monitoring. Data pipelines, cryptography, and ML are unforgiving if you cut corners so whatever gets built needs to actually work reliably, not just look good in demos.

Yousif_Ahmed_1

Thank you so much for that extra detail. "Error while getting invoice" is a different issue than a 404, and it's very helpful to know. This sounds like a script or API error on the page itself, which confirms that the geo-blocking is likely the root cause (it's blocking the invoice data from loading, not the whole page). I know it's a lot to ask, but does using a VPN solve this specific error for you as well? That would confirm our theory. I truly appreciate you taking the time to troubleshoot this with me. It's frustrating that these technical barriers exist.

Steadbrisk

Hello!!! Thanks for the AMA. Not sure if this is possible on your side, but you’ve mentioned automatic API rewriting and site parsing as key features. Do you have plans to open-source your agent spec so that other developers and platforms can build compatible agents? By such, creating an open ecosystem rather than a closed one?

cmxhere

Hii, you mention about automatic rewriting and request enrichment to make messy data usable. So, I would just like to ask a question on what’s the most complex API or site your agents have successfully parsed and improved, and what was the outcome? any surprising or unexpected results you can point out?? Thanks.

RealVoldemort

Are you using your own AI model? Or using something like Gemini or chatgpt API?

AutoModerator

Post is by: js-psyll and the url/text [ ](https://goo.gl/GP6ppk)is: /r/CryptoMarkets/comments/1n8j9fs/4_years_solo_grind_now_psyllcom_is_live/ Hey traders 👋 After 4 years of grinding solo (in the basement, of course), I finally launched [Psyll.com](http://Psyll.com) \- a platform for automated trading. I built everything myself from bots, execution system, backend and frontend to UI design, testing countless iterations, and finally deploying it live. Connect your exchange via API, run bots that send buy/sell signals, and always stay in control of your funds. Transparency is key – all bot handles and live stats are fully visible. Feedback, suggestions, or first impressions are very welcome! *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/CryptoMarkets) if you have any questions or concerns.*

Neat-Emu-8731

Imo, a unified crypto dashboard that actually works across all chains, CEX + DEX, NFTs, and DeFi in one place (without API/key nightmares) would be a game-changer. Most trackers either miss assets, lag on prices, or break when networks update. Something clean, real-time, and simple enough for normies but powerful enough for degens that’s the tool I wish existed.

Cosmo_EVA

Hi Greg. Thanks for your question. EVA’s model is designed to cover both sides: \- **B2B**: Our API is a major focus here, it’s already been adopted by 50+ projects that integrate EVA’s security layer directly into their products. That includes larger teams as well as plenty of solo devs \- **B2C**: Instinct (our trading bot) and Intel (our real-time scanner) are built for retail traders. Crypto is still first and foremost a trader’s playground, and if you can deliver real edge in that space, you can generate consistent revenue even in quieter market cycles. So while institutions and projects lean heavily on our API, Instinct and Intel are very much tailored for the retail crowd.

accountuser9000

Do you have an API for that dashboard? That's pretty awesome.

BigDreamsSmallWall3t

What are the specific upgrades being made in V2 of the API?

002_timmy

*From EVA AI team-* Hey r/CryptoCurrency, I’m Cosmo, Co-Founder and Business Lead of EVA AI. EVA is building the security and trading layer for Web3, powered by our proprietary AI. We started 12 months ago with the belief that security in crypto shouldn’t be an afterthought, and we’ve been proving that ever since. Join me for an AMA Sept 1st-3rd right here in this thread, where I’ll be answering your questions on EVA’s products, growth, and what’s next. What I’m excited to talk about 🔶 Instinct: The Ferrari of Sniper Bots Instinct is EVA’s Pectra-native sniper and trading bot. We designed it to execute faster, cheaper, and safer than anything else on the market, and it does. Since launch it’s already processed millions in volume, with traders saving on gas, fees, and avoiding copy-traders thanks to Instinct’s built-in privacy. We’re about to roll it out to Base - and more chains are on the roadmap. 🔶 Tokenomics: Auto Buyback & Burn Every single Instinct transaction auto buybacks and burns $EVA. This creates constant deflation tied directly to real usage. Since our last check just two weeks ago, over 550,000 EVA has been burned, permanently removed from supply. The more Instinct grows, the stronger the deflationary flywheel becomes. 🔶 The EVA API Our API is already live and being used by 50+ integrations across ETH. It’s become a proof of concept that EVA’s AI security can scale across any tool, bot, or platform. With V2, we’re broadening the potential userbase even further and supercharging revenue, while giving partners a way to embed real security directly into their products. 🔶 Intel: Real-Time Protection + Advanced Analytics EVA Intel calls out scams and hidden risks before you get rugged. Our latest updates go further with advanced honeypot detection, smarter contract analysis, and real-time social metrics. On top of that, we’re about to launch APIv2, with 4 new endpoints for advanced analytics, giving users and partners deeper insights into liquidity, holder dynamics, whale activity, and market sentiment. 🔶 The Next Phase: Scaling EVA From Instinct to Intel to the API, everything we’ve built feeds into the same mission: making Web3 safer, faster, and more profitable for real users. Our new website (dropping soon) will tie it all together and tell the story of how each piece of EVA connects into the bigger ecosystem. —————- How to participate: Ask your questions below, anything goes: trading bots, security, revenue model, product roadmap, adoption. I’ll be live and answering questions beginning September 1st. Excited to dive in with you all and share more about how EVA is becoming the default security + trading layer for Web3.

PuzzleheadedHuman

I would try to go as far as possible with the CoinPaprika API, detailed here: docs.coinpaprika.com

Slow-Guide2909

Do you do API trading ? If not, which subReddits should I ask for a question regarding that ?

Eastern-Smell6565

Same here. CG jsut feels cleaner and less compromised. Their API alone is worth switching. It's simple, free, and actually works without all the CMC login/ads nonsense.

Mattie_Kadlec

I think that was an API outage or something like that. I remember reading similar stories. In any case, you can look into GRVT as well. They don't require KYC.

PubbaBean

I think people in general trust data from CoinGecko more than CMC these days anyways. So I guess the obvious choice for better data would be CoinGecko API.

myurtsever

You could use FreeBnk Pay—it supports recurring crypto (and stablecoin) payments with full API integration. [freebnk.io](http://freebnk.io)

HSuke

It's not just this sub. It's every sub ever since the API fees controversy. Where did everyone who left go?

only0555

For Crypto I use a script which lets me Trail SLs- Binance API mostly. Binance is my go to and also Mex is pretty neat too. According to my strategy I specify rules for SLs and as when there is a change the SLs change automatically in the system. Stocks are usually longer term beta for me. I use options to hedge then. And if it's a sideways movement- I use delta neutral strategies to get some theta. Options I do both for Crypto and Stocks: Let's talk crypto first- I always have my hedges in place so the maximum loss is always defined and along with another script Trailing my Hard SLs- Here my exits are both movement and time based. Crypto Options are not that mature. Especially because Delta tends to change a lot. Hence for Crypto Options it's mostly Hero Zero calls- Yes they work amazing if you know your winning rate and profitability quite well :)

italianwopper

Very likely I agree it's the API. I actually don't think it was a bot on gate; I think it has to do with the API I created. Although I set the permissions to not allow withdrawals. I suspect something has been compromised here imo. The only other thing it could be is that my logging details were somehow stolen off my device. But I have travelled through my browser history through every site over the past 2 months. I know every site I've visited, nothing else in my history. It's definitely not a phishing site. No friend or family has access or log in details. I've looked through signs on my device. I've run PowerShell searches, manually searched my event viewer. I've run a malware check nothing. No trojans either. I've run wireshark and am still monitoring my network, I don't see unusual IP's.

d0x77

There is no other possible way in the world to withdraw your money without any sort of verification other than API keys, that or gate just decided to pull them out (yeah unlikely). How does bots within gate work? Do you need to input your API keys anywhere or does it connect you through the bot using your credentials? Because my guess is gate encrypts the API keys before exposing them, thats the least security measure that they could do, but yeah API keys are the reason, im confident.

italianwopper

Yeah absolutely, I have never copied a bot or tried to use anyone else's. Hence why I decided to write my own script which I never fully completed anyway. Definitely sounds malicious to me. First time I've tried using API and I've been hacked. Sounds too coincidental. I was a fool for trying the API on my trading account. A user here said I should have had a second account, I agree with that. Hopefully someone else learns from my mistake.

italianwopper

I'm pressing on with the request for API logs. According to them, the back end verified the withdrawals as approved via 2fa, email code, funds password etc. Notifications sent as well. Although none received my end. No signs of access into my email, looking at the IP activity. No signs of any other mail missing, or read, or tampered with. Gate hasn't sent me proof of the notification emails, or the API logs. Hoping the police work with me in requesting that info.

italianwopper

The whole event occurred over about 1 and half hours. There were definitely manual trades made. I see your point here, as in an exploit by gaining front door access into the account, then manually selling the assets into usdt to withdraw. Otherwise an API exploit that runs it backdoor, would execute the events a lot quicker.

italianwopper

Yeah I def did not enable any withdrawals. The only permission it was given was to place a spot order. Altho, I think the API has something to do with it. It looks like the most obvious to me. Gate won't provide me the API logs, I have to request that through the authorities which I'll do. If it turns out to be an API compromise, then it's an issue on gate's side as the API was set by me to be restrictive. I suspect this is why they're being difficult and unsupportive with me. If it turns out to be a gate issue, it opens a rather large fucken can of worms.

d0x77

I have designed my own bot and im using api keys to place trades, so im in a very similar situation like yours, my only guess for this "stealthy" theft is that you had enabled withdrawals for api keys, and they got compromised by using the gate bot, there is nothing else i could think of considering you know all the scams and phishing links, and you do take precautions. There is no way someone can steal from a CEX, its very complicated, the only way to bypass all this is through API keys, check the permissions, im pretty sure withdrawals are enabled.

Top_Mind9514

“API’s” are a huge security threat/risk

italianwopper

100% I think it was an API exploit yeah... that's all I can pin it down to. It's become an argument as to which side was breached my device or my account directly. Obviously I'll be put on me, the funds are gone and albeit the risk was my choice. I think I'll stick to trading on a local exchange if there must be trading. Gate is quick to take money but when you're funds are lost you're the last person they'd want to help.

BendNo2750

Hey dude, solid idea on using AI to spice up those password guesses! If the pass is English-based (like words, phrases from hints), here’s a quick take on scripting it with an AI API: Loop a script that hits an AI API for deets on keys/setup) with your hints as prompts. Something like: “Generate 50 creative English variations of [hint1] + [hint2], mix in numbers/symbols from 2015 era.” Then feed the output list into btcrecover or hashcat for testing.

Admirral

this is really cool! Are you pulling all data for analysis from DexScreener API or are you doing something that is solana specific? Do you have a GTM plan ready or in the works?

mohicanin

Not only in this sub. Whol Reddit is being created with AI to engage ppl, make then interract so they can charge bigger money from LLM companies for API access.... I see shitloads of posts where "ppl" are asking literally dumb questions, on which they coulda have found answers in google in no time... Time to completly move on to X

amanj41

Been an SDE for 7 years. And I can guarantee you it costs *literally* nothing to store rows on a blockchain (for a developer) once the data is loaded. I don’t know the total cost to load this dataset into Algo, granted. But if you want to dump data somewhere and expose an API to read from it there is go cost to the developer themselves once the data is loaded on the blockchain. Compared to hosting a DB in AWS, plus a lambda or EC2 or whatever to handle the queries. And if someone decides to DDOS your service for fun either you pay for the DDOS protection or get hit with a bigger bill. In any case, this just boils down to semantics. Yes blockchain is more costly and inefficient. But I’m just pointing out that blockchains subsidize the cost of storage once it’s loaded and the users of the data instead end up paying one way or another

Azzuro-x

You may ask Gate.io for assistance more precisely if their internal logs show login with your credentials + successful 2FA verification + verification sent to your email address and/or any API based connection attempt during the incident. For the login based scenario I only see two options for the missing verification email (1) they did not send it meaning their side was compromised or (2) someone has access to your emails, confirmed the access then deleted it.

metamorphosis

No worries. Good luck. It's highly unlikely your 3 layers of security got compromised or some sophisticated attack to take ownership of your OS/ machine is also highly unlikely....so it must have been exchange/bots/API related.

Azzuro-x

99% of the trades on the exchanges these days are performed by bots. They are safe to use with the proper API settings - assuming the given exchange enforces the rules (which is fairly easy to check with a test withdraw request if needed).

metamorphosis

Not familiar with gate exchange and if these bots are gate official bots or user bots? To narrow it down, does gate offer API activity log? Re: script. Did you implement your own gate API or downloaded a library ? Where from ? Either way, yeah it seems too coincidental. Check addresses to which funds are withdrawn too. Check their bubble map and activity. That can give some insights https://bubblemaps.io/

Azzuro-x

Have you enabled withdraw as well for the API key in question or only trading ?

god_damn_you_tiger

macOS user? If so, perhaps you were the victim of zero day attack that Apple patched 5 days ago. But 16k sounds too small to exploit, attack should have been really sophisticated and targeted. I lean towards API compromise here tbh

amanj41

Cheaper for who? Doesn’t get much cheaper for users to have a free public database with negligible transaction fees. Spinning up a DB in AWS and building a service with an API is more expensive singe ALGO is so cheap. I don’t think ALGO’s low fees are sustainable in the long run tho