Skip to main content
CoinPulse
3Commas
Trading tool· founded 2017

What Is 3Commas? Crypto Trading Bots, Pricing and How It Works

3Commas is subscription software that runs automated trading bots on your own crypto exchange account. You connect an exchange such as Binance, Kraken or OKX with an API key, and 3Commas places orders there on your behalf. It does not hold your funds, and the company says its API access cannot withdraw them 45. 3Commas is operated by 3Commas Technologies OÜ, a private limited company registered in Tallinn, Estonia 1. Its main tools are DCA, grid and signal bots plus a manual SmartTrade terminal. In December 2022 it confirmed that user API keys had leaked 6.

Facts checked 8 cited sources No score on this page, no affiliate links

At a glance

Operator
3Commas Technologies OÜ (Estonia, registry code 14125515) 1
Founded
2017, Tallinn 2
Service type
Trading-automation software (bots, terminal, API); no exchange, wallet or token
Custody
None. Funds stay on your exchange; 3Commas trades via API keys 45
Plans
Starter, Pro, Expert; roughly $15–$140 a month depending on plan and billing period (October 2026) 3
Exchanges
Nine listed on the pricing and exchanges pages as of October 2026 34
Markets
Spot on all plans; futures on Pro and Expert 3
Funding
$37M Series B in 2022, led by Target Global 2
Official site
3commas.io
Updated
October 23, 2026

What 3Commas does

3Commas sits between you and an exchange. The exchange still holds your balance, matches your orders and charges its own trading fees. 3Commas supplies the logic for when to buy and sell and sends the orders through the exchange's API. The company describes itself as providing "software only," with any trading, transfer or wallet services supplied by third parties 4.

That split matters in two ways. If 3Commas goes offline, your funds remain on the exchange, but running bots stop managing positions. And the exchange's rules — KYC, regional restrictions, fees, leverage limits — apply exactly as they would if you traded by hand. See how crypto trading bots work for the general mechanics.

The bots and tools

The current pricing page sets limits for three bot types and positions, which shows what the product is built around 3:

  • DCA bot. Opens a position, then adds to it in steps if the price moves against you, aiming to close the whole position at a target profit on a smaller rebound. It applies a dollar-cost averaging idea to short-term trading. The trade-off: each safety order increases the amount committed to a falling asset.
  • Grid bot. Places a ladder of buy and sell orders inside a price range you set and profits from oscillation within it. If price leaves the range, the bot stops capturing moves and you can be left holding the asset or cash.
  • Signal bot. Executes trades from external signals, for example webhook alerts. Webhook execution is included on every plan 3.
  • SmartTrade terminal. A manual order screen that lets you attach take-profit, stop-loss and trailing conditions to one trade (see order types).
  • Demo account. Paper trading on all plans, so you can run a bot without real money 3.
  • Developer API. Read-and-write API access for programmatic control is listed on the Expert plan 3.

None of these tools guarantees a profit. Bot settings, fees and market conditions decide the result, and backtests or demo runs do not account for every live-market cost.

How the API-key connection works

To connect an exchange, you create an API key in your exchange account and add it to 3Commas. The company says the access it needs is limited to starting and closing deals, with "zero access to withdraw or transfer" funds, and that keys are stored in an isolated system it calls Sign Center 5.

Practical steps that limit exposure, based on 3Commas's own guidance 5:

  1. Create a dedicated API key for 3Commas and leave withdrawal permission off.
  2. Restrict the key to 3Commas's official IP addresses where your exchange supports IP whitelisting.
  3. Turn on two-factor authentication both on the exchange and in 3Commas; if you sign in with Google, Apple or Facebook, secure that account too.
  4. Delete the key on the exchange when you stop using the service.

A key without withdrawal rights can still place trades. The 2022 incident below showed that a leaked trade-only key can be used to buy illiquid coins at manipulated prices, draining value without a withdrawal.

Plans and pricing

As of October 2026, 3Commas sells three plans. The pricing page shows two prices for each, plus an annual saving; the lower figure matches the annual rate 3:

Plan Price per month Markets Active DCA / Signal / Grid bots API keys per exchange
Starter $15 (annual) or $20 Spot 5 / 2 / 2 1
Pro $38 (annual) or $50 Spot and futures 20 / 20 / 10 5
Expert $105 (annual) or $140 Spot and futures 1,000 / 1,000 / 1,000 25

Starter, Pro and Expert also cap open positions at 500, 1,000 and 5,000. Each plan offers a free trial, and the FAQ says a plan bought during the trial begins when the trial ends; the page does not state the trial length 3.

The subscription is not your only cost. Every order a bot places pays the connected exchange's maker or taker fee, and futures positions add funding and liquidation risk. A DCA or grid bot that trades frequently can generate more exchange fees than the subscription itself (see crypto trading fees).

Supported exchanges

As of October 2026, 3Commas's pricing and exchanges pages list nine exchanges: Binance, Hyperliquid, Bybit, OKX, Bitget, Gate, Kraken, KuCoin and Coinbase 34. Older pages and the site's own metadata cite a larger number, and some exchange names appear only in menus, so check the live exchanges table before signing up. Availability also depends on whether the exchange serves your country; for example, a Binance account must be on the Binance entity that accepts you. Profiles: Binance, Kraken, OKX, Bybit, Coinbase, Hyperliquid.

Company background

3Commas Technologies OÜ was entered in the Estonian Business Register in October 2016 1; the product launched in Tallinn in 2017 2. In 2022 it raised a $37 million Series B led by Target Global, with Alameda Research and Jump Capital among participants 2. Yuriy Sorokin was CEO when the 2022 key leak was confirmed 6.

Incident record

1 not recovered

Users on several exchanges reported unauthorized trades through 3Commas-linked API keys

Oct–Dec 2022not recovered
FTX flagged unusual DMG trades placed via 3Commas accounts in October. 3Commas first pointed partly to phishing 6. On Dec 28, 2022, after about 100,000 keys were published online, CEO Yuriy Sorokin confirmed the data was genuine and asked Binance, KuCoin and other exchanges to revoke all 3Commas-linked keys 67. The company said it found no proof of an inside job, removed technical staff's infrastructure access from Nov 19, and would involve law enforcement 7
Outcome
No confirmed recovery. A proposed US class action alleging negligent security was dismissed on jurisdictional grounds, then revived by the Ninth Circuit on Mar 2, 2026 and sent back to a California federal court. Ongoing as of October 2026
Loss
About $22M, per reporting and later court filings; not confirmed by 3Commas
Recovered or reimbursed
No confirmed recovery. A proposed US class action alleging negligent security was dismissed on jurisdictional grounds, then revived by the Ninth Circuit on Mar 2, 2026 and sent back to a California federal court. Ongoing as of October 2026
Source: cointelegraph.com

Hacks in DefiLlama’s public database are also scored as the security record on the 3Commas rating page.

Questions about 3Commas

Does 3Commas hold my crypto?
No. Your funds stay on the connected exchange. 3Commas places orders through an API key, and the company says that access excludes withdrawals and transfers 5.
Is there a free plan?
As of October 2026, the pricing page lists paid plans with a free trial and a demo (paper-trading) account; no permanent free tier is shown 3.
Can 3Commas trade futures?
Yes, on Pro and Expert plans. Starter is spot only 3. Leverage and liquidation rules come from your exchange.
Who owns 3Commas?
It is run by 3Commas Technologies OÜ in Tallinn, Estonia 1. Its 2022 Series B was led by Target Global 2; current shareholdings are not published on the official site.
What should I do if I connected an API key during 2022?
Delete any 3Commas-linked keys created before the leak on the exchange itself and issue new ones with withdrawals disabled. Never share keys or 2FA codes with "support" that contacts you first (see phishing).
Where can I see how CoinPulse evaluates 3Commas?

3Commas elsewhere on CoinPulse

Sources

  1. 1Estonian Business Register, 3Commas Technologies OÜ —ariregister.rik.ee
  2. 2CEE Legal Matters, "Cobalt advises 3Commas on USD 37 million Series B" (Oct 5, 2022) —ceelegalmatters.com
  3. 33Commas, Pricing —3commas.io
  4. 43Commas, Supported exchanges —3commas.io
  5. 53Commas, Security —3commas.io
  6. 6Cointelegraph, "3Commas CEO confirms API key leak" (Dec 28, 2022) —cointelegraph.com
  7. 7SiliconANGLE, "3Commas confirms massive API key leak" (Dec 29, 2022) —siliconangle.com
  8. 8Bloomberg Law, "Consumers revive data breach suit over millions in crypto losses" (Mar 2, 2026) —news.bloomberglaw.com

Other trading toolsAll →

What changed on this page

  • 2026-10-23Profile created.
All companies