Binance has revoked all API keys connected to third-party trading platform SignalPlus following a potential security issue, cutting off automated access to customer accounts as cryptocurrency
Binance has revoked all API keys connected to third-party trading platform SignalPlus following a potential security issue, cutting off automated access to customer accounts as cryptocurrency exchanges move to prevent unauthorized trading.
The November 5 precautionary measure follows a security warning involving SignalPlus, which provides trading tools for cryptocurrency options and derivatives markets. Deribit also removed API credentials associated with the platform after reviewing its exposure.
Binance confirmed that its systems were unaffected and customer funds remained safe. Deribit similarly reported no evidence that its infrastructure or customer data had been compromised.
The nature of the potential SignalPlus security issue remains undisclosed, with no confirmed financial losses or evidence of unauthorized customer transactions.
SignalPlus provides trading infrastructure that allows cryptocurrency investors to manage positions, execute strategies and access derivatives markets through exchange API connections.
These credentials enable external applications to interact with trading accounts without requiring users to log into the exchange for every transaction. Depending on their permissions, API keys can authorize order placement, account monitoring and other trading operations.
Binance’s decision immediately invalidated existing SignalPlus connections, preventing the third-party platform from submitting further instructions using those credentials.
However, revoking an API key does not automatically close positions or cancel existing exchange orders. Binance instructed affected customers to log directly into their accounts and review open orders, positions and recent activity.
The exchange also recommended waiting until SignalPlus confirms that its security issue has been fully resolved before creating replacement API connections.
Binance founder Changpeng Zhao extended the warning to users of other cryptocurrency exchanges, advising traders to revoke SignalPlus-related API keys wherever they had connected the service.
Zhao also cautioned against storing exchange API credentials with third-party providers, emphasizing the risks associated with allowing external platforms to control trading permissions.
Binance encouraged users to enable IP whitelisting, which restricts API access to approved network addresses, and asked integration partners to review their security controls for suspicious activity.
Deribit maintains similar account security recommendations, including IP restrictions, limited API permissions and additional authentication protections.
The precautionary action comes one week after Binance suffered a $6.3 billion cryptocurrency theft on October 29, which U.S. authorities attributed to North Korea’s TraderTraitor hacking operation.
That incident involved compromised employee devices, stolen credentials and unauthorized access to internal wallet infrastructure.
Binance subsequently replenished approximately 98% of affected assets, while working with blockchain partners to freeze or intercept approximately $2.85 billion in stolen cryptocurrency.
There is no evidence connecting the SignalPlus warning to the earlier exchange breach.
The latest measures also follow security incidents involving other cryptocurrency platforms and their external service providers.
On November 2, Trade.xyz restored compromised GitBook documentation, while an earlier attack on Polymarket exploited malicious code distributed through a third-party monitoring service.
Unlike those incidents, the SignalPlus warning has not been linked to confirmed fund losses, compromised trading infrastructure or malicious transaction activity.
Neither Binance nor Deribit has disclosed how many customer accounts were connected to SignalPlus when the credentials were revoked.
The post Binance, Deribit Revoke SignalPlus API Keys Following Security Warning appeared first on Crypto Adventure.
