South Korea’s crypto industry is moving to clamp down on shared API keys as automated trading climbs to roughly 30% of domestic volume.
The Digital Asset Exchange Alliance (DAXA) has rolled out a new API-key compliance standard for its member exchanges — including Upbit, Bithumb, Coinone, Korbit and Gopax — that empowers platforms to invalidate keys they believe have been improperly lent or shared. Regulators and exchanges say such sharing can give third-party tools full access to price checks, balances, orders, deposits and withdrawals, and has been linked to unfair trading tactics and potential market manipulation.
Under the new rules, exchanges can escalate monitoring after suspicious activity, issue warnings, require renewed identity verification and forcibly expire API keys. Member platforms will also implement IP whitelisting so API keys only function from pre-registered addresses, making keys harder to reuse from other locations or automated systems.
The Financial Supervisory Service (FSS) has flagged automated, API-based trading as a growing risk — about 30% of crypto turnover in South Korea now flows through APIs — and warned that high-frequency and coordinated activity can produce false volume, spoofed orders and other distortions that misrepresent token liquidity. The regulator has also cautioned users about trading code shared online that enables aggressive automated strategies and urged investors not to chase unexplained price spikes.
DAXA’s executive vice chairman Kim Jae-jin framed the change as a user-protection measure, saying the group will “respond swiftly to new and emerging threats.” The new API standard is explicitly not a ban on API trading; rather, it targets the practice of handing over account access or letting others trade through one’s exchange account.
This API policy adds to broader tightening across South Korea’s crypto market. Regulators previously ordered exchanges to adopt five-minute balance checks, automatic trading halts and monthly audits after past control failures, and have warned that a proposed anti-money-laundering rule could balloon suspicious transaction reports from about 63,000 to more than 5.4 million.
For traders and third-party tool providers, the change means more stringent monitoring, a likely reduction in shared-key use, and faster exchange intervention when account access looks irregular — all part of a wider push toward earlier action against market abuse and stronger operational controls.
Read more AI-generated news on: undefined/news
