Dunamu: "Never Rent Out Upbit API Keys or Accounts, Even for Read-Only Access"

Dunamu, the operator of cryptocurrency exchange Upbit, has urged investors to exercise caution over requests to rent out API keys and accounts that are spreading on social media.

On October 8, numerous cases were reported on social media of people approaching investors with offers to rent or buy Upbit accounts that can access the KRW market, or API keys with read-only or view-only permissions.

These claims are false. Upbit's standard quotation and market data service (Quotation API) is a Public API that does not require authentication. If an API key is exposed, it could be used for fraud or other unauthorized purposes, potentially resulting in financial losses.

Dunamu warns users not to lend their accounts to others or provide them with Open API keys for any reason. Depending on the permissions granted, an API key is sensitive authentication information that can provide access to a member's asset, order, and deposit and withdrawal information, or enable trading.

To prevent losses, users should not share their API keys or account information with others. If an API key is exposed externally or suspected of being compromised, users should delete it immediately and obtain a new one. Unused API keys should also be deleted promptly to eliminate the risk of potential exposure.

Dunamu is strengthening API security to protect members from emerging scams such as Qishing (QR code phishing). Even when an API key includes the "withdraw" permission, withdrawals are blocked by default. A withdrawal is possible only if the user manually enables the "Allow withdrawals" feature in the mobile app, providing an additional layer of security. The company also helps users identify API call attempts from IP addresses that have not been registered in advance by notifying them through KakaoTalk Alimtalk.

A Dunamu official said, "Even if someone tries to lure you by saying the key is for viewing purposes only, handing your account information or API key to another person is like giving a stranger the key to your safe. Upbit will continue to make investor protection its top priority and strengthen monitoring to do its utmost to keep members' assets safe from malicious scams."

This content was produced with the assistance of AI translation services.