Security experts have raised urgent concerns about a critical credential exposure affecting users of NOFX AI, an open-source automated trading platform. SlowMist founder Yu Jian disclosed that multiple users have suffered confirmed cryptocurrency theft, with their wallet authentication credentials and exchange API keys falling into unauthorized hands. The security flaw extends beyond NOFX AI—Aster users face similar vulnerabilities to their private wallet keys.

This key breach represents a significant threat to the automated trading community. Yu Jian emphasized that security teams are actively working to identify and contact compromised users while implementing countermeasures. Users of both platforms are strongly encouraged to take immediate protective action, including resetting compromised credentials and monitoring their accounts. The incident underscores the critical importance of securing sensitive authentication data when using third-party trading automation tools.