Skip to content

Bitfinex API Keys

Service Name: Bitfinex

Service Description: Bitfinex is a cryptocurrency exchange platform that allows users to trade various cryptocurrencies. It provides trading services for digital assets such as Bitcoin, Ethereum, and other altcoins, along with margin trading and lending features.

Service Address: https://www.bitfinex.com/

Validation Type: API Auth

IP Allow list: IP restriction is available at the API key level. Users can restrict API key usage to specific IP addresses through the Bitfinex platform settings.

Secret Access Scope: Grants programmatic access to Bitfinex trading platform, allowing automated trading, account management, and data retrieval depending on the permissions assigned to the key.

Secret Revokement URL: https://www.bitfinex.com/api

Secret Example: 9T111111111111111111111111111111

Suspicious Activity Investigation Instructions:

  • Review account activity logs for unauthorized trades or withdrawals
  • Check API key permissions and usage history in the Bitfinex dashboard
  • Monitor for unusual trading patterns or withdrawal attempts
  • Verify if the API key has been used from unexpected IP addresses
  • Check for unauthorized changes to account settings or preferences

Mitigation Instructions:

  • Log in to your Bitfinex account and navigate to API management section

  • Immediately disable the compromised API key

  • Create a new API key with appropriate permissions if needed

  • Enable IP restrictions for the new API key to limit access to trusted IP addresses
  • Enable two-factor authentication (2FA) for your Bitfinex account if not already

active

  • Review and update your account password
  • Contact Bitfinex support to report the security incident