KuCoin launched in September 2017 with the tagline "The People's Exchange" — reflecting its positioning as an accessible, globally available alternative to the larger exchanges, with a particular focus on early-stage altcoin listings that institutional-grade exchanges were unwilling to list. This strategy created a loyal user base: traders who want access to emerging projects before they hit Binance, Coinbase, or Kraken. KuCoin has listed hundreds of small-cap tokens in their early stages — some became multi-100x winners (early listings of KSM, LUNA, AXS), many became zero. The discovery angle is the primary reason experienced altcoin traders maintain KuCoin accounts alongside their main exchange accounts. This guide covers KuCoin's complete product suite and the full process for setting up KuCoin API keys for trading bots.
The Altcoin Discovery Advantage
KuCoin's listing team actively seeks projects that are pre-Binance listing — smaller by market cap, less regulatory scrutiny from Coinbase's compliance process, often still in early product phases. The KuCoin Spotlight (token sale platform) and Early Access programs give users the ability to participate in new token launches. For altcoin traders who research projects carefully, KuCoin provides access to markets that simply don't exist elsewhere. The risk of this approach is proportional to the opportunity: small-cap tokens have wide spreads, limited liquidity, and many become worthless — due diligence is essential. KuCoin's listing volume is far higher than major exchanges, meaning the average quality is lower, but the maximum upside from early discovery is also higher.
Fees and KCS Discount
KuCoin's standard trading fees are 0.10% maker / 0.10% taker — matching Binance's base rate. Holding KCS (KuCoin Token, the platform's native token) and enabling the KCS fee deduction reduces both rates by 20%, bringing them to 0.08%/0.08%. VIP volume tiers reduce fees further: at VIP 1 ($50K monthly volume), fees reach 0.09%/0.09% without KCS, or lower with KCS. KuCoin Futures fees are 0.02% maker / 0.06% taker at the base tier. Withdrawal fees are competitive for most assets — KuCoin often supports multiple networks (including its own KuChain) for lower withdrawal costs on select tokens.
KYC Policy: Accessibility with Trade-offs
KuCoin allows accounts without KYC for daily withdrawal limits up to 5 BTC equivalent — significantly more permissive than Binance, Coinbase, or Kraken. This policy has made KuCoin popular in regions with limited banking access and among users who prefer minimising personal data shared with centralised entities. The trade-off: KuCoin's more permissive KYC has drawn regulatory scrutiny. In October 2023, the US DOJ indicted KuCoin and two of its founders on AML violations, money laundering, and operating an unlicensed money transmitting business. KuCoin reached a settlement in 2024, paying $300M+ in penalties and agreeing to enhance AML/KYC controls and exit the US market. The settlement resolved the criminal exposure without shutting down the exchange, but it did require KuCoin to implement stricter KYC for all users going forward — the unlimited no-KYC model is no longer available. KuCoin's 5 BTC daily limit without KYC is now subject to the revised controls agreed in the settlement.
The September 2020 Hack and Security Improvements
In September 2020, KuCoin suffered one of the largest exchange hacks in history: approximately $281 million in Bitcoin, Ethereum, ERC-20 tokens, and other assets were stolen from KuCoin's hot wallets. The attacker's identity was never publicly confirmed, though multiple blockchain intelligence firms attributed the attack to Lazarus Group (North Korea-linked state hackers). KuCoin's response was rapid: the exchange recovered approximately $204 million (72%) of stolen assets through cooperation with blockchain projects that froze stolen tokens, on-chain analysis, and coordination with other exchanges. The remaining losses were covered by KuCoin's insurance fund. No user funds were ultimately lost. Post-hack, KuCoin overhauled its hot wallet architecture, implemented dynamic hot/cold wallet splitting, enhanced API key monitoring, and added abnormal withdrawal detection. The hack is a material fact for any KuCoin user to understand — it happened, KuCoin handled recovery impressively, and they made meaningful security improvements — but it remains in the security track record.
Setting Up KuCoin API Keys for a Trading Bot
KuCoin's API uses a three-credential system like OKX: API Key, API Secret, and a Passphrase. All three are required for authenticated requests.
Step 1 — Enable 2FA on your KuCoin account. Go to Profile → Security → Google Authenticator. KuCoin requires Google Authenticator for API key management.
Step 2 — Navigate to API Management. Profile icon → API Management. Or: kucoin.com/account/api. Verify your 2FA code to access the API management page.
Step 3 — Click "Create API". Name your API key clearly (e.g., Bot-Spot-Grid). Choose between:
- General (HMAC-SHA256) — Standard key pair, supported by CCXT and most bot frameworks.
- Trading Password Phrase — API with a specific trading passphrase, for additional security.
Step 4 — Set your Passphrase. KuCoin requires a custom Passphrase during API creation. This passphrase must be sent with every API request. It is separate from your account password. Store it securely alongside your API Key and Secret.
Step 5 — Configure permissions. KuCoin's permission options:
- General — View account info, balances, order history. Always enable.
- Trade — Place, modify, and cancel spot and margin orders. Enable for any trading bot.
- Futures — Enable only if your bot trades KuCoin Futures (separate permissions from spot).
- Transfer — Move funds between KuCoin accounts (spot, trading, futures). Disable unless your bot actively manages fund allocation between accounts.
- Withdraw — Never enable for a trading bot. The KuCoin hack involved unauthorised API key use for withdrawals — this permission must never be granted to any automated system.
Step 6 — IP whitelist restriction. KuCoin allows up to 20 IP addresses per API key. In the IP Restriction field, enter your bot server's static IP. Given KuCoin's hack history (which partially involved compromised hot wallet keys), IP restriction on API keys is even more important than at exchanges with cleaner security records. Always restrict to your server IP.
Step 7 — Complete 2FA verification and save credentials. KuCoin will display: API Key, API Secret, and confirm your Passphrase. The Secret is shown only once. Save all three to your environment variables: KUCOIN_API_KEY, KUCOIN_API_SECRET, KUCOIN_PASSPHRASE.
Step 8 — Configure your bot for KuCoin's API. KuCoin V2 REST API base URL: https://api.kucoin.com. KuCoin Futures API: https://api-futures.kucoin.com. CCXT configuration: exchange = ccxt.kucoin({'apiKey': key, 'secret': secret, 'password': passphrase}). Note: CCXT uses password for KuCoin's passphrase, same as OKX.
Step 9 — KuCoin's built-in trading bots. Unlike most exchanges where you bring your own bot, KuCoin offers native trading bots directly in the platform: Spot Grid Bot, Futures Grid Bot, DCA Bot, Smart Rebalance, and Infinity Grid. These run entirely within KuCoin without requiring external API connections — useful for traders who want automated strategies without the operational overhead of running an external server and bot software. If you use KuCoin's built-in bots, you don't need API keys at all — they run under your account credentials internally. External API keys are only needed if you want to run your own bot code or connect a third-party service (3Commas, Pionex, Cryptohopper).
Who KuCoin Is Best For
KuCoin suits: altcoin researchers who want early access to small-cap tokens before major exchange listings; yield-focused traders who want to combine spot trading with KuCoin's lending, earn, and staking products under one roof; traders who want built-in native bot tools without running external infrastructure; and users in emerging markets who benefit from KuCoin's global accessibility and historically permissive account access policies. KuCoin is less suited for: US-based traders (KuCoin is not available to US users post-settlement); traders who prioritise above all else a hack-free exchange security record; and institutional traders who require regulatory-grade custodianship and compliance documentation.
KuCoin's massive altcoin selection makes it particularly useful for traders looking for early-stage tokens not yet listed on larger exchanges like Binance or Coinbase. For derivatives, compare Bybit and OKX. For decentralized alternatives, see Uniswap and Raydium for on-chain trading. Use our crypto tools and DennTech blog for KuCoin updates.