What Broker Permissions a Trading Bot Actually Needs
Scoping a broker credential correctly bounds what an attacker can do with it. The 3Commas breaches proved it does not make one safe: accounts were drained using trade permissions alone, through the market rather than through a transfer.