[chisleu]

We don't know Binance was hacked. Relatively few people use API keys to trade and every reported account had API keys on it. It's likely some malware that looks for API keys in config / python files laying around.

[ceejayoz]

Perhaps. A SQL injection hole could potentially expose API keys, or there could be a vulnerability that lets an attacker add an API key.