Binance API - IP Whitelisting ≠ userData protection

A ListenKey from a whitelisted IP can be consumed from a different, non-whitelisted host - no secret required.

📺 5-min uncut proof: https://youtu.be/y9dGtHLEBp8

#infosec #cybersecurity #apiSecurity #responsibledisclosure #binance