"Hey guys, I've been digging into some popular crypto trading bot platforms and I think I've found a major vulnerability that could be exploited by bad actors. From what I've seen, these platforms allow users to configure custom API keys with excessive permissions, which could give attackers full access to user accounts. Has anyone else noticed this or even worse, experienced it firsthand?"