Help with exchange API security issues

[bpwallace]

Hey people.

I am almost done creating a project and without going into too much detail I wanted to implement something that allows trading through the exchange APIs for the user. I thought it was going to be relatively simple to do but then someone brought up security issues and past attacks on websites that are holding API keys where they pump coins. What is the best way from a security POV to do this.

I am too technical but my simple ideas are:
-We host them normally but only allow exchanges that can restrict IPs
-A user hosts a program locally that connects to my web app (Does this help the security issue?)

Any help or direction would be greatly appreciated!