
When IP Whitelisting Isn't What It Seems: A Real-World Case Study from the Binance API
A case study on how Binance's listenKey design bypasses IP whitelisting, why Bugcrowd dismissed it, and what this teaches us about API secur...

A case study on how Binance's listenKey design bypasses IP whitelisting, why Bugcrowd dismissed it, and what this teaches us about API secur...

TL;DR — UBDCC is not "Redis for Binance order books". It is an order book trust layer: every layer of the stack — UBWA, UBLDC, the cluster, ...

Until now it was only possible to receive data from Binance via WebSocket. To send requests to the Binance API, for example to create or can...

If you maintain a local Binance order book, there is a good chance it contains price levels that no longer exist on the exchange. Not becaus...

I wanted to re-open an old Binance API security issue. Not because I enjoy re-litigating old reports. Because the last thirteen days made th...

US servers unfortunately can no longer connect to binance.com (geoblocking). unicorn_binance_rest_api.exceptions.BinanceAPIException: APIErr...

REST, WebSocket, order books, trailing stops, and cluster-scale infrastructure — the...

Real-world engineering lessons from scaling automated crypto P2P payouts: solving sub-second race conditions, network drops, and double-spen...