The leak comes after 3Commas repeatedly told users that they had been “phished” after widespread hacks.