RE: Binance announces Binance Chain, a decentralized exchange

They didn't need to touch their api settings, they just gave their account details to the wrong person, who did it for them.