Wow. As someone who does website design SSL implementation is easy and should be a priority for this type of site. If you don't have enough "resources" to do about 4 hours of work, then you're in trouble.
Secondly, what would an attacker steal that is valuable? Crikey. What world do you live in? First off, it would crush your "business". Secondly there are lazy users that reuse account names and passwords which could lead them to major theft on other sites, but then it appears you don't really care about their security anyway. Based on that I have to assume your database is probably not even hashed or secured properly.
Lastly if someone steals your API keys they could sell off everything you have in your account just to drive prices down for their own amusement and possibly profit.
Certainly the user security is our priority. User passwords are hashing now. As we worte above in commercial version we will implement SSL and other security improvements.
In test version we would like to focus on trading algorithm of the robot. We asume that users understands all risks and will use their test accounts.