Can my funds be stolen via API from the exchange?


Crypto-currency exchanges have largely provided for this point, so they offer advanced settings of API keys, in which you can configure various rights. The most important thing to mention is that it is strictly forbidden to make possible the withdrawal of funds (withdrawal) through the API key. There are enough rights for the bots of the service to view the status of accounts and the possibility of placing orders.