Elaborate about what? I have no idea have anybody could have gotten the key. Have you actually read my post?
I did read your post (but in a TLDR kind of way). The "API key" caught my eye.
You claim that API key was not compromised, and assuming that you indeed ran it in a VM, seem very unlikely (but not impossible) that it was compromised... unless your VM has a trojan (possible). Can you guarantee that your computer was not compromised?
Unless the API key was compromised, it seems very strange. But then everything on Bitcoin-24 is strange.
