Can my funds be stolen via API from the exchange?
Cryptocurrency exchanges have largely provided for this point, so they offer advanced API key settings, in which you can configure various rights. The most important thing to cancel here is that it is strictly forbidden to make possible withdrawal through API key. For the service bots are quite enough rights to view the status of accounts and the ability to issue orders.
Please note that your keys should be stored in a safe place out of reach of intruders. Observe the «rules of hygiene» in the network, do not use unknown links received via e-mail, sms, messengers, avoid phishing sites.
In addition, please note that the administrators of the service is never the first to write you a personal message. It can be cheaters. On all such cases, please tell us in the chat telegram