Can someone steal your funds via your Exchange API?
hackernoon.com