I saw the incident of the API being stolen by Teacher Dachengzi. Because I was also doing API arbitrage operations on aicoin last night, I thought of the risk issue at the first time.

I just asked a friend for a solution: make a currency whitelist on the API, and only allow him to use the API of the whitelisted currency to trade BTC, so that he will not be knocked away by the counter-trading. Its counter-trading can only be done by the currency with very low liquidity.

The essence of the counter-trading: For example, a hacker uses my usdt spot to buy a very small currency, which can be pulled up instantly. The hacker then ambushes long orders in the contract in advance, so that the money can be taken away from the secondary market without a trace. But this requires that the liquidity of this currency is particularly poor, so only small currencies can do it.

Do you have any other ways to ensure the security of the API?