Binance revokes all SignalPlus API keys after security issue

Binance said on November 5 that it proactively removed all API keys linked to third-party trading platform SignalPlus after a reported security issue on the platform's side. The exchange says its own systems were not affected and user funds are safe.

Details

SignalPlus is a Hong Kong-based platform offering trading tools for digital assets, with a focus on options and derivatives. Users connected their Binance accounts to it through API keys to run strategies automatically; with the keys revoked, those connections stopped working (Crypto Briefing, PANews).

Binance told SignalPlus users to log in to Binance directly to check positions and open orders, and not to re-bind API keys until SignalPlus confirms the issue is resolved. It recommended enabling IP whitelisting and urged integrated third-party platforms to review their security controls and watch for unusual activity (PANews). Reuters also reported the key removal (Devdiscourse).

According to a Wu Blockchain post, Deribit also removed SignalPlus-linked keys, saying it found no sign of impact on its systems or data. We could not confirm that detail with a primary source.

Neither the nature of the SignalPlus issue nor any user losses have been disclosed. Crypto Briefing notes no significant market impact so far.

What this means for the market

The episode comes a week after the Binance hack, so attention to third-party connections is already high. The practical takeaway for traders: API keys given to outside services grant trading access, so limit their permissions and whitelist IPs. For the live bitcoin price, see the daily brief.