Not Your Keys, Not Your Coins. So Why Does Your Bot Have Both?

This story was originally published on HackerNoon at: https://hackernoon.com/not-your-keys-not-your-coins-so-why-does-your-bot-have-both. An exchange API key with withdrawals disabled answers the smallest custody question. Here are the two it hides, and how to check any bot in five minutes. Check more stories related to web3 at: https://hackernoon.com/c/web3. You can also check exclusive content about #crypto-trading-bot, #self-custody, #smart-contracts, #api-security, #web3, #bnb-chain, #defi, #cybersecurity, and more. This story was written by: @btcbot-dev. Learn more about this writer by checking @btcbot-dev's about page, and for more stories, please visit hackernoon.com. A trade-only API key stops withdrawals, not losses. And the balance your bot trades is a claim on a venue, not coins you hold. Three custody questions, five properties you can verify without asking anyone, and a five minute check you can run on any on-chain bot, including mine.