3Commas denies staff members stole API keys