NEVER CHANGE YOUR API KEY
Or you won't be able to use CAT.
I know there's a problem on poloniex. Hope they'll be able to solve.
Your API Key should not have the withdraw option activated, so no risk for you.
Maybe, I am wrong, but it has a trading ability. Somebody could trade on my expenses to his crap coin!
I think we should find another mechanism that allows us to change the keys by our own. E.g., to have an account with you, and get there a key, which only fits to exchanges we paid for.
Make a CAT key pair for each user. In each version you just give in the keys and allowed exchanges for that key. Then we can use our own keys as we need to.