3Commas is pleased to announce our new partnership with Santiment!

Santiment is a blockchain data analytics platform that provides users with on-chain, social, and market data insights. 

The platform is designed to assist traders, investors, and researchers in making informed decisions by providing real-time data, insights, and analysis. 

Here’s an overview of what Santiment offers

On-chain data analytics: The platform provides information on the top holders of a particular token and how they are trading, giving users an idea of the sentiment around that token.

Social data analytics: The platform tracks social media platforms such as Twitter, Reddit, and Discord for mentions of particular tokens. This data can provide insights into the sentiment around a particular token and help users make informed decisions. For example, if a particular token is receiving a lot of positive mentions on social media, it may be an indication of future price appreciation.

Market data insights: The platform tracks trading volumes, price movements, and other market data for various tokens. This data can be used to analyze market trends and identify potential opportunities for investment.

NVT (Network Value to Transactions) Ratio: This metric compares a token's market capitalization to the volume of transactions on its network. The NVT Ratio can provide insights into the valuation of a token and how it compares to other tokens on the market. 

Check out Santiment’s plans, prices & features.

HaasBot Review: What Is HaasBot?

Founded by the current CEO Stephan de Haas back in 2014, HaasBot is a cryptocurrency trading robot hosted by the HaasOnline Trade Server [HTS]. The bot incorporates technical indicators, crypto scripting language HaasScript, backtesting using historical trades, and more.

HaasBot Review: An Instant Look 

HaasBot is a powerful automated trading bot similar to 3Commas. The bot is designed to level up your trading through risk/reward features, triggers, indicators, and more. Let’s address pros and cons for a quick HaasBot review.

What Is Chainlink (LINK)?

Chainlink is a decentralized open-source network built on Ethereum. It provides an oracle service that translates external data (price, events, etc.) to a language that smart contracts can understand (and vice versa). And LINK is the native token that is used to pay for the service.

The network was launched in June 2017 by co-founders Steve Ellis and Sergey Nazarov. Chainlink held its ICO the following September, raising the equivalent of $32 million. At the time, they sold 35% of the 1 billion unit supply. By the end of 2021, there will be only 46% of coins in circulation, which means the company is very good at regulating the supply.

Trading using DCA Bots on 3Commas just became more powerful than ever in 2025. 

We’ve released a major update (explained below) that gives you more control over how your DCA Bot operates when markets are trending up and down. 

These changes mean it’s now easier than ever to set your DCA Bot up to automatically take advantage when prices are rising — and automatically protect your capital when they’re trending lower.

The update delivers three key changes:

1. Automated Reinvesting: You can now set your DCA bots up to automatically reinvest a percentage of your realized profits. Your bot will calculate how much to reinvest based on the initial investment, then increase new deal sizes accordingly.
   
   When reinvesting, the DCA Bot will calculate the percentage of the reinvested funds relative to the initial investment (base order + safety orders). It will increase the new deal size (both base and safety orders) by that percentage.
   
   This feature is currently only available for Pro plan users. 

1. Automated Risk Reduction: Just as you can now automatically reinvest profits, you can also set DCA bots to automatically protect your funds from further losses when the market’s going against you. Your bot will decrease future deal sizes based on past losses. 

1. Increase to Safety Orders: Safety orders are another great tool for optimizing your DCA bot performance when prices are trending lower. We’ve doubled safety trades for DCA deals from 100 to 200, and increased the maximum count of active safety trades from 10 to 200. 

More About Trading With DCA Bots

A DCA strategy is the practice of investing at regular intervals to reduce risk. When you enter the market with a single deposit, you run the risk of purchasing highs and wind up at a loss when the price drops. However, you can invest in parts, reducing risks from the consequences of local price movements, distributing investments over time.

Learn more about DCA Bots.

2025 DCA Bots Feature Update  

As an automatic trading software vendor, in 2025 3Commas added some cutting edge features to DCA Bots to further aid DCA traders and asset managers in management and efficiency.  

Increased Pair Selection Options for DCA Bots Through Integration with TradingView Crypto Screener  

The pair selection procedure during DCA Bot setup is simplified thanks to the addition of TradingView Crypto Screener. Pairs can now be filtered by time frame preferences, TradingView’s buy/sell recommendations, TradingView RSI Indicators, and market cap ranked lower than certain thresholds. DCA bots configuration is now easier when combined with this data-driven decision-making tool.  

DCA Bots Configuration at 3commas now allows setting up to four take profit orders with trailing profit capability.  

With this change, traders can now implement more complex profit taking strategies where they can capture more conservative profits as price continues to move favorably. Additional profit maximization can potentially be achieved through the trailing feature, which narrows the profit taken as market price moves in its favor.

Signal Bots and DCA Bots on 3Commas: A Closer Look

For asset managers, the challenges presented by disparate portfolios have long been a burden. To address these issues, 3Commas has released a new software specifically tailored for automated trading in cryptocurrency that can help with automation heretofore unseen in the industry. It’s called 3Commas for Asset Managers and this instrument facilitates automated execution of sophisticated strategies on numerous client accounts, all whilst streamlining manual supervision and operational workload.

As asset managers usually apply uniform strategies across multiple portfolios, the centralized dashboard allows such trades to be adjusted and monitored in real-time. Of particular note is the synergy with DCA Bots as well as AI analytics-driven crypto trading bots capable of executing rules-based trading on a large scale.

Primarily, the security of the clients is taken into account during the onboarding process: the client exchange account connections are made through a secure authorization portal which makes sharing API keys unnecessary with the asset managers. These methods are considered best practices when dealing with institutional accounts which need automated cryptocurrency trading.

Amidst a growing number of professional traders using AI bots to trade cryptocurrency, easing the burden of managing risks, automating entry and exit points, and scaling these strategies into different market conditions becomes increasingly attractive.

As more professional traders incorporate AI bots for crypto trading into their workflows, these tools offer a streamlined approach to managing risk, automating entries, and scaling strategies across market conditions.

These changes show the core focus of 3Commas to always provide sophisticated tools aimed at professional traders and asset managers, strengthening strategic and operational flexibility with the use of DCA Bots.

What is Bitsgap?

Bitsgap is a crypto trading platform that connects multiple exchanges into one interface and lets you automate trades using bots. It works as a unified trading terminal. You connect your exchange accounts via API and manage everything in one place instead of switching between platforms. Bitsgap supports 17+ exchanges and focuses on simplifying execution across them.

Optimize your Grid bot in under 7 seconds 

There is a new Optimize button you can see after running a Grid Bot backtest.

What it does is take your High/Low settings and run a series of 120-day backtests in order to find the best Step for your bot. Imagine doing it manually - that’s quite a lot of tedious work!

The optimizer will only update your bot’s settings if the new result is better than your initial backtest.

Our GRID Bot comes with a really strong combination of pre-optimized settings for each pair, asymmetric grid structure, and the Trailing function. 

If you still prefer to choose your own grid ranges, the new Optimize function will allow you to adjust the pair’s volatility, just like if you were still using the default pre-optimized setup for the selected pair. 

And it only takes 6-7 seconds to improve your bot!

Asymmetric Grid bot - Why is it important in 2024?

We’ve got an interesting new style of Grid Bot for you. The asymmetric grid structure (5 Sell levels + 95 Buy levels) is now available by default in your grid.

The grid bot was originally made for sideways markets, so how can we make it work for a rising market? 

We did a little brainstorming and added the Trailing Up function, allowing you to:

• Minimize the need to buy the base currency when starting a bot
• Avoid missed profits due to selling a rising currency (in case it is rising)
• Minimize the losses in case the base currency is falling
• Expand the grid range downwards, increasing the bot’s uptime and potential profits, too.

In other words, the less base currency you have, the better, that’s why we now always put a 5/95 grid on your screen. This plus the Trailing Up feature is, in our opinion, the recipe for a potentially good grid trading strategy.

Get a pre-optimized Grid bot for each pair by scanning for trading opportunities

Whenever you click the ‘Pair’ field in your Grid bot, you will now see that there is a huge list of pairs sorted by 120-day backtest results.

To make this list, we run a series of backtests for each pair with standardized settings. Then we publish the result of the best setup for each pair.

When you click a pair in this list, the optimized settings are automatically selected in the bot launcher interface, saving you the tedious work of running dozens of backtests before starting a bot. 

You can also filter the raw list of pairs to find better trading opportunities:

• Strong Buy and Buy signals by TradingView Technicals indicator
• <30 and <20 RSI values (i.e. oversold signals).

These filters can be combined so you can narrow the selection of pairs.

We will be adding additional sophisticated filters over time to give you the capability of quickly finding optimal trading pairs and reducing the amount of research required to start a bot that has a higher probability of success. 

At the moment, if you’re using your Binance or Paper Trading accounts you can automatically create a pre-optimized bot, and we’ll be bringing this feature to other exchanges as soon as we can. 

Trailing Stop Loss for DCA Bot is here! 

We’ve had this feature for a smaller exchange for a while, and you guys and gals have been telling us you want it for every exchange.

Okay, you win. Here it is. 

For those who don’t know, Trailing Stop Loss (TSL) helps reduce losses or retain more profits by moving the Stop Loss (SL) level as the price level moves. Under the right market dynamics, it can even turn a profit if the timing is perfect. The bot watches the price of the coin. As long as the price is going up, TSL will follow it up. If the price starts to fall and hits your TSL threshold, the bot will execute a market order on the exchange account to close the deal rather than keeping it open and, potentially, have you holding red bags. Unlike Trailing Take Profit, which has to hit a threshold before it kicks in, Trailing Stop Loss works unconditionally from the time the bot is activated.

So now, rather than having a static SL that requires monitoring and adjustment if the market is moving up, you can turn on TSL and increase the odds of having your bots exit the market with a lot more of your profit intact if the market drops.

Couple of details you should be aware of: 

• TSL won’t activate if its price is past the liquidation price
• You can only have Trailing Take Profit or Trailing Stop Loss active, not both
• You can’t add safety orders to deals with TSL enabled
• When the active TSL level moves higher than a placed safety order, it cancels the safety order

Maximize Your 2025 Grid Bot Performance with AI Tools and Automatic Backtesting

Meeting the demands of Grid Bot strategy optimization in 2025 requires precision, adaptability, and a data-first mindset. As crypto trading automation becomes more sophisticated, professional traders and financial institutions are adopting automatic backtesting and AI Grid Bot enhancements to improve overall Grid Bot performance.

Confidence in Strategy Execution Starts with Automatic Backtesting

Before allocating capital, validating your Grid Bot strategy through simulated market conditions is essential. With 3Commas’ automatic backtesting tool, traders can test a broad range of grid configurations against historical data to uncover setups that align with specific performance goals. Whether managing personal assets or institutional portfolios, this process supports better decision-making by identifying inefficiencies and limiting unnecessary exposure.

AI Grid Bots That Adapt to Market Conditions in Real Time

In 2025, 3Commas introduced trailing up and trailing down, an AI Grid Bot enhancement that continuously adjusts grid parameters based on live market data. These AI-driven bots operate within user-defined limits, reducing the need for manual oversight and improving responsiveness when the price range moves upwards or downwards out of the initial grid references. For asset managers running multiple strategies, this automation allows for scalable execution while maintaining alignment with client mandates.

Built for Financial Professionals and High-Volume Traders

3Commas, as an automated trading software provider, continues to deliver tools tailored to professionals. The latest Grid Bot and Smart Trade updates offer enhanced reporting, streamlined multi-account management, and compliance-ready oversight—key requirements for serious hobbyist traders, asset managers, and institutional participants.

The last few months have been the toughest in the history of 3Commas, as we continue our battle against sophisticated and knowledgeable criminal hackers. As we previously made public, 3Commas launched an investigation into this situation and, given the complexity of the attack, has brought in a larger team of cyber experts to assist in this work.  

We want to let you know that we have hired the global cyber-security company, BlueVoyant, to build on the work already done with the goals of seeking to establish how this criminal attack happened and also to ensure that our amended systems are tested independently and are secure. 

We would like to thank all customers, partners and friends for the many messages of support we have received during this challenging time. 

We would also like to thank you for your continued support.  We shall, of course, keep you updated as our investigation continues. 

We plan to leave no stone unturned in our quest to unmask the perpetrators of this crime against us all. We are making significant investments to enhance our security systems and protocols to ensure we emerge from this attack stronger, and better.  We have made it our mission to regain your trust.  We will deliver on this goal.

3Commas is constantly improving and adding new safety and security layers to your API keys. Below you will find steps our tech team has taken recently to make 3Commas more secure and actions what you can do to make sure your API keys are safe.

Sign Center

Sign Center is a secure API keys storage that is isolated at both infrastructure and access levels to ensure the security of our systems. When 3Commas makes a trade request with an exchange, 3Commas servers ask the Sign Center to sign a transaction that needs to be executed, very similar to how you would have Metamask or Ledger sign a transaction.

API Key IP Whitelisting

We are expanding the list of IP whitelisting functionality to exchanges. When you create an API key at your exchange, you can specify an IP whitelist. The IP whitelist can be used to restrict the API key to certain IP addresses, thereby blocking any trading activity outside 3Commas. The created API key can’t be added to any other account on 3Commas, which makes any attempt to steal API keys pointless as they simply cannot be used.

Fast Connect

The exchanges that are focusing on better serving traders are including Fast Connect to their tech roadmaps. Fast Connect can help users quickly authorize specific account permissions, create API keys, and automatically connect to third-party API link platforms.

Fast Connect allows you to log in to your exchange account via the quick connect function on 3Commas platform. It can automatically generate API keys and bind to our platform, ​​so you can start using 3Commas services without manually creating API keys.

Anti-Phishing Code

3Commas' anti-phishing code is a security feature that helps users identify legitimate emails from the platform. It works by requiring users to set a unique code that will be included in all official 3Commas emails. If an email from 3Commas does not contain the user's set anti-phishing code, it is a fraudulent email and should be ignored. 

Learn how to enable it here.

Revoke Old API Keys

1. Reduces Attack Surface

Old API keys, especially ones no longer in use, can become easy targets for attackers. If they're not monitored regularly, they might go unnoticed even if compromised. Revoking them limits the number of potential entry points into your account.

2. Invalidates Access You No Longer Control

You may have shared an API key with a tool, trading bot, or developer in the past. If you're no longer using that integration, the key might still grant access. Revoking it ensures nobody can continue using your account without permission.

3. Mitigates Risk of Stale Permissions

Over time, your needs change — maybe you've updated permissions or switched to different tools. Leaving old keys active may leave powerful permissions in place that no longer align with your current risk tolerance.

4. Encourages Rotation and Best Practices

Frequent key rotation is a basic security principle — like changing passwords periodically. Revoking and regenerating keys helps ensure your access points stay current, monitored, and secure.

5. Prevents Conflicts and Performance Issues

If you’re running new bots or automated tools, old API keys could still be active in the background, making calls to the exchange and possibly conflicting with your current setup — affecting performance or triggering rate limits.

Is 3Commas safe now?

At the moment of writing we have seventeen partner exchanges accessible to our traders. While our tech team is in process of introducing maximum layers of security for each of those, we would like to give you more transparency. Below you will find a table that will help you make informed decisions on connecting new API keys.

We've worked hard to introduce whitelisting to more exchanges and we will be updating the table below to keep you informed about the new launches.

To see our full range of security features with instructions on how to make the most of them, please visit the Security article in the 3Commas Help Center.

API key leak security incident FAQ

What is the API keys disclosure incident?
On December 28th, 2022 it was brought to our attention that a group of bad actors had posted sample files containing 100k 3Commas customers’ API keys. At this moment we are actively investigating the incident, and are taking all necessary steps to contain the situation and prevent any future disclosure incidents.

How did this happen?

We have been targeted by criminal hackers who have, it appears, somehow obtained access to part of our database.  We have hired a cyber security expert to help us establish how this crime was achieved.  At present, that investigation is ongoing and we do not know how the criminals got through the barriers.

Who is behind this?

We don’t know yet. But we are working with experts and law enforcement agencies to identify the criminals involved in this attack. We will keep you posted.

What information do the hackers have?

We do not know the full extent of their intrusion at present and this forms part of the investigation. What we know for sure is that at least 100k Binance and Kucoin API keys and secrets have been exposed.

What do you make of the fact that the hackers say they did this to teach you a lesson for bad security?

This is clearly no white hat hacking.  This is a criminal attack from an organization that is doing it for financial gain.  No matter how the hackers wish to portray this, this is a crime for which there are consequences.

When did the intrusion happen?

Based on the sample data published by the attackers, we believe it took place in October/November time frame.

Given that it is now January, why have you been so reticent to communicate about this properly? 

We did not know about the attack on our infrastructure before the public statement by the attackers on Dec 28. All the information we had available told us it was not coming from us. Now, when it became evident that our database had been exposed, we immediately took action to address the intrusion. We contacted the exchanges to revoke all API keys, launched a new investigation, and contacted law enforcement. Our previous assumptions were wrong. We promise we will continue to communicate openly and honestly with our community via our blog and social media channels and share as much information as we can.

How much money have the hackers taken?

We will make this public once the investigation is complete.

Will you be compensating your users who have lost out because of the security incident?

We are investigating how this crime was perpetrated.  We had strong security systems and protocols in place and yet it appears that the hackers were able to overcome these, as they have with many other organizations.  We will have more to say once that investigation concludes.

So will you be compensating users?

We cannot address that until the investigation concludes.

I suspect malicious activities in my account, what should I do?

If you suspect your funds and/or account are impacted by this situation, we would like to get in touch with you. Please reach out to us via our support chat to open a case.

I have reached out to 3Commas customer support and am waiting for a response, what can I do?

Due to the API disclosure incident our support team is experiencing unusually high loads of incoming requests. You can expect some delays in our response, but rest assured, we are working around the clock to get back to you ASAP.

Is 3Commas safe to use?

We are confident that the changes made by 3Commas, with the introduction of the Sign Center that isolates at both infrastructure and access levels, will ensure the security of our system.  But in addition, we are expanding the IP whitelisting functionality to allow users greater control of their security choices. You can follow the status on extra security layers for the exchanges here.

What is a Sign Center?

Sign Centre is a secure API keys storage that is isolated at both infrastructure and access levels to ensure the security of our systems. When 3Commas makes a trade request with an exchange, 3Commas servers ask the Sign Center to sign a transaction that needs to be executed, very similar to how you would have Metamask or Ledger sign a transaction. As of today, most of the exchanges have been transferred to the Sign Centre already. Please see our exchange security layer table for the latest updates.

What should I do to protect myself?

We have created a special page showing extra security layers for each of the exchanges and the steps that you can take to secure your API keys. Please check the page to see whether your API keys have been revoked by the exchange. If they haven’t, we ask you to re-issue your keys immediately. Check out the security page here.

Notice on API data disclosure incident

On 28 December 2022 there was a post made on the Pastebin website, that has since been taken down, from a supposed hacker claiming that they had got access to API data stored in 3Commas’ database. 3Commas can confirm that 3Commas first found out about the hacking and the hacker’s statement from the same Pastebin post as the rest of the 3Commas community. This notice provides details about the incident, our response, and description of the measures taken by us so far.

What does this mean? What should users do?

At this point, 3Commas can unfortunately confirm that some of 3Commas’ users’ API data (API keys, secrets and passphrases) have been disclosed by a third party. Currently and to the best of our knowledge only API data have been disclosed as part of this incident. As a likely consequence the hacker(s) may use or may have used the API data to connect your exchange accounts to his/their account and/or initiate unauthorized trades. 

Since becoming aware of the supposed hacker's Pastebin post, we have requested that Binance, KuCoin and other supported exchanges revoke all keys that were connected to 3Commas. We strongly recommend every user to reissue an API key they have currently connected to an exchange. If you need help with updating your API keys, please check the following guide: https://help.3commas.io/en/articles/3166090.

What we are doing

3Commas acknowledges that in the Pastebin post the hacker alleged in a way that some 3Commas’ employee has sold to them the above-mentioned user data. 3Commas is investigating this allegation seriously through all possible means, also engaging law enforcement authorities accordingly. However, 3Commas stresses that it has found no evidence during the internal investigation that any employee of 3Commas was somehow involved in attacks against the API data. Obviously, it is also in 3Commas’ interest to find out whether any employee has committed those acts alleged by the hacker. Therefore, it is to be hoped that further investigations will clarify all the details behind the attack and identify the perpetrators who are responsible for the damage caused. We urge all the users affected by the attacks to contact their local police and/ or Estonian legal authorities as it may help them to carry out their investigations and identify the perpetrators. 

We acknowledge that in our previous communications we suggested that the attacks most likely resulted from phishing, malware or any activity intended to cause disruption to our infrastructure. We conducted rigorous internal investigations which did not provide us with proof of compromised codes or breaches in our systems and servers nor evidence that we had bad actors among our employees. At that time the only reasonable information we had gathered pointed to phishing or other software disruption activity and hence we took actions to notify our users in regard to that issue.

In addition to the actions already taken and explained in our posts and statements so far, we will continue to optimize and enhance the security measures. Among those, on 16 November 2022 we implemented the new Sign Center. We created it in response to the attacks on exchange accounts that began in October. As a result of the implementation of the new Sign Center the access to API keys has been limited even further. We are going to publish a detailed article explaining fully how Sign Center works in the near future.

Please note however, that in the meantime, our services are running normally, and we will continue to operate in a state of heightened alert.

Contact information 

If you have any questions regarding this notice, the incident or require assistance, please contact 3Commas’ support or write to support@3commas.io.

We regret that such an incident and attacks have taken place. We are committed to keeping you informed of our findings and updating you on the actions we are taking as much as possible. 

We thank you for your support and patience while we work through the investigation. We will continue to provide updates as we learn more. 

Sincerely,

Yuriy Sorokin

3Commas' CEO

2025 Update: Continued Commitment to API Key Security and Infrastructure Transparency

As of 2025, 3Commas as a software provider has implemented a series of infrastructure and security improvements in response to past incidents involving unauthorized use of API keys. These enhancements reflect both internal lessons learned and the evolution of best practices across the broader automated crypto trading ecosystem.

Strengthening API Key Integrity

We now enforce stricter encryption standards, isolate API key environments, and apply rate-limiting and behavioral analytics to flag and prevent unusual account activity. Additionally, every API integration via 3Commas now undergoes real-time verification against known exchange-side key restrictions—such as IP whitelisting requirements, key permissions, and expiration policies—to reduce attack surface and ensure user control.

These efforts are foundational for protecting accounts that use tools like ai bot crypto trading solutions and auto crypto trading bots, which often run continuously and require uninterrupted access to exchange APIs.

User Controls and Monitoring

Advanced user-facing controls allow traders to:

• Receive real-time alerts for API-related events
  
  
• View detailed logs of each integration's activity
  
  
• Instantly revoke and reauthorize API keys within the 3Commas interface
  
  

We’ve also added automated audit recommendations that guide users in applying optimal settings based on their trading activity and exchange-specific security practices—whether they’re using a dca bot, a signal trading bot, or a grid trading bot.

Transparency Going Forward

The original 2022 disclosure was a pivotal moment that shaped how we approach both incident communication and preventative architecture. Today, 3Commas prioritizes early detection, fast response, and open disclosure when risks are identified. All engineering processes now include external review by third-party security auditors.

These developments align with our ongoing mission to provide professional traders and asset managers with secure, automation-ready tools—whether they’re deploying a crypto ai bot, an ai trading bot crypto setup, or any other automated cryptocurrency trading bot—across a diverse and fast-evolving market landscape.