There should be a differentiation with the API such as "Trade API" and "Withdrawal API". As of now the system is not secure.