On this page 12
Our verdict
Mature DCA, grid and TradingView signal bots, sensible pricing and better key security than in 2022. Held back by a disruptive v1 shutdown with no migration, missing mobile apps, an AI product with undisclosed models, and a security record that still matters.
Best for: Intermediate traders who automate TradingView signals and are willing to rebuild on v2.
Key takeaways
- v1 was deactivated on 11 September 2026. v2 was built with WunderTrading, and bots, API keys and settings did not migrate.
- QuantPilot (launched 17 June 2026) is a separate agentic AI product paid in "QP" credits. The underlying models are not disclosed.
- Pricing: $20 / $50 / $140 a month, or $15 / $38 / $105 billed annually. No free plan.
- The December 2022 API-key leak was confirmed by the CEO, and a second incident followed in October 2023. Key handling has improved since.
This 3Commas review comes at an awkward moment. One of the best-known names in crypto bots launched in 2017, built a loyal following on its DCA bots, and in 2026 rebuilt itself from scratch. If you used 3Commas before September, your bots are gone and you have to set them up again. If you are new, you are buying into a platform that is still restoring features.
We read the v2 help article, the pricing and security pages, the QuantPilot launch post, press coverage of the 2022 and 2023 incidents and 1,764 Trustpilot reviews, all checked on 21 October 2026.
3Commas review at a glance
| Item | What we found |
|---|---|
| Official site | 3commas.io ↗ · AI: quantpilot.com ↗ |
| Company | Launched 2017, Estonia-registered (Tallinn) |
| Model | Non-custodial software, connects to your exchange by API |
| Bots | DCA, Grid, Signal (TradingView webhooks), Terminal (formerly SmartTrade) |
| AI | QuantPilot agentic strategy builder; core bots are rule-based |
| Exchanges | 10 listed in the menu, plus Hyperliquid in v2 |
| Price | From $20/mo ($15/mo annual); no free plan |
| Apps | Web only for now; v1 apps removed, v2 apps "coming later" |
| Trustpilot | 3.4/5, 1,764 reviews (21 Oct 2026) |
What changed: the v1 shutdown and the v2 platform
On 11 September 2026, 3Commas deactivated its original platform. According to its own help-centre article, the successor "3Commas v2" was built in partnership with WunderTrading, the bot company behind a multi-exchange signal platform. The practical consequences were blunt:
- No migration. Strategies, API keys and bots did not carry over. Users rebuilt everything manually.
- No mobile apps. The v1 iOS and Android apps were removed; v2 apps were described as "coming later".
- Limited refunds. Only annual or longer plans with time left qualified.
- A 7-day v2 trial was offered so people could test before paying again.
Recent Trustpilot reviews, from August to October 2026, are dominated by this migration: lost bots, missing DCA and backtest features and refund disputes. Company replies say features are being restored. If you rely on a specific v1 feature, confirm it exists in v2 before you subscribe.
3Commas AI: how QuantPilot works
The "3Commas AI" people search for is QuantPilot, a separate product at quantpilot.com. Early access was announced on 2 April 2026, and it went live on 17 June 2026. 3Commas describes it as an "agentic" platform: you describe a trading idea in plain language and AI agents turn it into a strategy, backtest it and optimise it.
The data sources are named: CoinMarketCap, DefiLlama, CryptoQuant, CryptoNews API and Tavily (a web search API). The models are not. We do not know which LLMs run the agents, how strategies are validated, or how much of the optimisation is classic parameter search versus anything that learns. Execution on Hyperliquid was listed as "coming soon" at launch. Usage costs internal "QP tokens", which are credits, not crypto.
Our read: QuantPilot is a genuine attempt at agentic strategy design, which puts it a step beyond a chatbot bolted onto a bot. It is also a black box. An LLM-designed strategy that looks great in a backtest is still just a backtest, and LLMs are good at producing over-fitted rules that sound convincing. In the Alpha Arena experiment, only 6 of 32 LLM trading runs finished positive. Paper-trade anything QuantPilot builds before funding it. Our guide to how AI trading bots work explains what to look for.
The bots themselves, DCA, grid and signal, are rule-based. That is our "rules plus AI layer" rating, not "real ML".
3Commas bots and supported exchanges
3Commas DCA bot
The DCA bot made 3Commas popular. It opens a position, adds "safety orders" as price falls to lower the average entry, and closes at a take-profit. It can start deals on signals, including TradingView alerts. The risk is the same as any safety-order DCA bot: in a long downtrend it keeps buying until the budget is gone. Compare it with other options in our DCA bots guide.
3Commas grid bot
A standard grid bot that places buy and sell orders across a price range. It works, but grid is not where 3Commas stands out. Plan limits are tight on Starter (2 grid bots).
Signal bots and Terminal
Signal bots execute TradingView or Pine Script webhooks, which is the main reason intermediate traders still pick 3Commas. The manual trading tool once called SmartTrade is now called Terminal in v2, according to company replies on Trustpilot. Futures are available from Pro upward. See our AI crypto trading signals guide before you automate someone else's alerts.
Exchanges
The pricing page says "9 exchanges", but the menu lists 10: Binance, Bitstamp, Bitfinex, Coinbase, OKX, KuCoin, HTX, Bybit, BitMEX and Kraken. The v2 help article adds Hyperliquid. That is a narrower list than Bitsgap (16) or WunderTrading (20).
3Commas pricing
Prices below are from the official pricing page, checked on 21 October 2026. They appear to be v2 prices. There is no free plan; a demo account is included and the help centre mentions a 7-day trial.
| Plan | Monthly | Annual (per mo) | Accounts | Bot limits | Futures |
|---|---|---|---|---|---|
| Starter | $20 | $15 | 1 | 5 DCA, 2 signal, 2 grid | No |
| Pro | $50 | $38 | 5 | 20 DCA, 20 signal, 10 grid | Yes |
| Expert | $140 | $105 | 25 | 1K bots each, Developer API | Yes |
The structure is clear and there is no per-trade fee on top. QuantPilot is billed separately in credits. The real question is whether a subscription makes sense for your account size. A $50 plan costs $600 a year, so on a $5,000 account the bot must beat 12% a year before fees just to pay for itself. Our trading bot ROI calculator runs that maths for you.
3Commas security and incident history
Any honest 3Commas review has to cover 2022. Here is the timeline from press reports and the company's own statements.
| Date | What happened | Source |
|---|---|---|
| Oct 2022 | Unauthorised trades on DMG pairs through FTX-connected keys. 3Commas blamed phishing; about $6M was reportedly reimbursed via FTX | Blockworks, as reported by third parties |
| 11 Dec 2022 | CEO Yuriy Sorokin called screenshots of an alleged insider leak "fake" | Cointelegraph |
| 28 Dec 2022 | After a hacker published data and Binance's CZ warned users, Sorokin confirmed the data was genuine. Exchanges were asked to revoke 3Commas keys | The Block |
| Dec 2022–2023 | About 100,000 keys reportedly in the database, 10,000 published. Loss estimates: ~$14.8M (researcher), ~$20M (Halborn), over $27M (HAPI) | Halborn, ForkLog/HAPI |
| 10 Oct 2023 | Second incident: unauthorised access to customer account data, mainly accounts without 2FA. 3Commas said API secrets and passwords were not compromised | Blockworks |
What 3Commas does now
The security page describes a Sign Center: API keys are kept in isolated storage and requests are signed there rather than in the main application. It supports IP whitelisting where the exchange allows it, offers "Fast Connect" (automatic key creation on some exchanges), and states it is trade-only software that cannot withdraw funds. Cloudflare provides WAF and DDoS protection, and 2FA is recommended. After a password reset, API connections are now disabled. The page does not mention SOC 2, ISO 27001 or a bug bounty.
That is a reasonable architecture. The lesson of 2022 is that you should not rely on any vendor being perfect. Our guide on AI crypto trading safety covers key hygiene in full.
Keep your bot's capital on a regulated exchange
3Commas is software: your funds always sit on an exchange. If you are rebuilding your setup after the v2 switch, it is a good moment to check where your coins live. CEX.IO has operated since 2013, holds money transmitter licences in 39 US states plus DC and is FCA-registered in the UK. It is not on 3Commas's exchange list and has no bots, so use it for buying and holding.
Registrations checked October 2026 on the company's legal pages. Availability depends on your country; crypto is high-risk.
- Since 2013One of the longest-running crypto exchanges still operating
source - 39 US states + DCFinCEN-registered MSB with state money transmitter licences (NMLS 1804170)
source - FCA-registeredUK cryptoasset business under the MLRs, FRN 1007192
source - PCI DSS Level 1Card-payment security standard, 2026 certificate published
source
3Commas user reviews and complaints
On 21 October 2026, 3Commas had 3.4 out of 5 from 1,764 Trustpilot reviews, only 31 in the past 12 months. Lifetime distribution: 69% five-star and 14% one-star. That long-run score hides the recent mood. Reviews since August 2026 are overwhelmingly about the forced migration: bots and settings lost, DCA and backtest features missing in v2, and refunds refused to monthly subscribers. Trustpilot does not verify reviews, but the pattern is consistent with what 3Commas itself announced.
3Commas pros and cons
What works
- Mature, highly configurable DCA and signal bots
- TradingView and Pine Script webhook automation
- Clear pricing from $20/mo, 25% cheaper annually
- Sign Center key signing, IP whitelisting, trade-only access
- QuantPilot is a real attempt at agentic strategy design
Watch out for
- v1 shut down in Sep 2026 with no migration of bots or keys
- No mobile apps while v2 apps are pending
- Confirmed 2022 API-key leak and a 2023 account-data incident
- QuantPilot models undisclosed and billed separately in credits
- No free plan, narrower exchange list than rivals
3Commas alternatives
If the migration pushed you to shop around, these are the closest replacements.
| Alternative | Best at | Price | Note |
|---|---|---|---|
| Bitsgap | Grid, DCA, COMBO on 16 exchanges | Free, then $29/mo | Rejects withdrawal-enabled keys |
| Cryptohopper | Marketplace strategies, paper trading | From $29/mo | Running since 2017 |
| Coinrule | No-code rules, MCP agents | Free, then $29.99/mo | Not available in the EU/EEA |
| Freqtrade | Self-hosted, real ML | Free | Needs Python |
For DCA specifically, see our crypto DCA bots comparison; for leverage, read AI futures trading bots first.
Final verdict on 3Commas
3Commas still has one of the deepest DCA and signal-bot toolkits, fair pricing and a much better key-handling setup than it had in 2022. QuantPilot is an interesting bet on agentic AI, though you are trusting undisclosed models with your strategy design.
The 3.6 score reflects a platform in transition. Shutting down v1 without migrating users' bots, pulling the mobile apps and restoring features after launch is a lot to absorb, on top of a security history that still makes careful users nervous. If you need TradingView automation today, 3Commas v2 works. If you are not in a hurry, give it a few months, or start on Bitsgap or WunderTrading and come back once v2 is complete.
Frequently asked questions
Is 3Commas still working in 2026?
Yes, but as a new platform. 3Commas deactivated its original v1 platform on 11 September 2026 and moved users to v2, which it built in partnership with WunderTrading. Bots, API keys and settings did not carry over, so users had to rebuild them by hand. The v1 mobile apps were removed, with v2 apps described as coming later.
Is 3Commas safe after the API key leak?
3Commas confirmed in December 2022 that leaked API-key data was genuine, and it had a second account-data incident in October 2023. It now signs requests in an isolated "Sign Center", supports IP whitelisting and says it cannot withdraw funds. If you use it, create trade-only keys, enable the IP whitelist and 2FA, and use a sub-account with a capped balance.
What is 3Commas QuantPilot?
QuantPilot is 3Commas's separate agentic AI product, launched publicly on 17 June 2026. AI agents turn plain-language ideas into backtested and optimised strategies, using data from sources like CoinMarketCap, DefiLlama and CryptoQuant. 3Commas does not say which AI models power it, and usage is paid in internal "QP" credits, not crypto.
How much does 3Commas cost?
On the October 2026 pricing page: Starter $20 a month, Pro $50 and Expert $140, or $15, $38 and $105 a month billed annually. There is no free plan. The help centre mentions a 7-day trial for v2, and a demo account is included. QuantPilot credits are separate.
Is the 3Commas DCA bot good?
The DCA bot is still the core of 3Commas and one of the most configurable around, with safety orders, take-profit rules and signal triggers. Some v1 features were reportedly still being restored in v2 when we checked. Safety-order DCA can run into deep drawdowns in a falling market, so cap your budget. See our DCA bots comparison.
Does 3Commas have a grid bot?
Can I get a refund after the v2 migration?
According to 3Commas's v2 help article, refunds were offered only for annual or longer plans with time remaining. Monthly subscribers were not covered. Refund disputes are a common theme in recent Trustpilot reviews, so read the current terms before paying for a long plan.
Keep reading
Sources and fact-check dates
We link to primary sources wherever possible. Dates show when the page was published or when we last checked it.
- 3Commas help centre: 3Commas v2, everything you need to know · 2026-09-11, checked 2026-10-21
- 3Commas pricing · checked 2026-10-21
- 3Commas security page · checked 2026-10-21
- 3Commas blog: QuantPilot is now live · 2026-06-17, updated 2026-07-16
- Cointelegraph: 3Commas CEO confirms API key leak · 2022-12-28
- The Block: Binance warns about 3Commas API leak · 2022-12-28
- Blockworks: 3Commas security breach · 2023-10-10
- Halborn: explained, the 3Commas breach · checked 2026-10-21
- ForkLog: HAPI analysis of the 3Commas incident · checked 2026-10-21
- Trustpilot: 3Commas reviews · checked 2026-10-21
