After months in which victims were blamed for having poor opsec, 3Commas has finally admitted the stolen API Keys were indeed stolen.