This is very weird, to withdraw from binance account you need 2FA Code and also a code sent into your private email address, I'm wondering how this is possible and I can't think of anything than phishing scheme, unless someone you living with have access to your phone
no sir , those things you said is about using their website or application not API
check here for more information :
https://github.com/binance-exchange/binance-official-api-docs/blob/master/rest-api.md