search

hitbtc-com / hitbtc-api

HitBTC API
GNU Lesser General Public License v3.0
324 stars 153 forks source link

IF YOU CHANGE KEYS AND RUN THIS, IT WILL STEAL ALL YOUR COINS. #218

Open rwdim opened 5 years ago

rwdim commented 5 years ago

This script (example_rest.py) was written so that people who don't pay attention will run it after changing keys.

The last things it does it sell all your coins to BTC, and withdraw to the specified BTC address at the start of the script.

At the VERY least , only use an API Key set that cannot withdraw or trade.

hitbtc-com commented 5 years ago

Can you provide that the script is you talking about?

rwdim commented 5 years ago

The example_rest.py file is written so that if someone changes there keys and runs it, it will sell all their ETH to btc and then transfer it all to the Bitcoin address in the code.

All you have to do is read it.

ilaurensnl commented 5 years ago

Can you provide that the script is you talking about?

He probably ment this script, https://github.com/hitbtc-com/hitbtc-api/blob/master/example_rest.py

I do not have any experience with python, but like the topic starter says, If a guy that tries to run the python script and does not change the bitcoin address, it can cause their balance to be withdrawed to a third party & lost money. It's rather dangerous for a example.