Binance removed all API keys associated with SignalPlus on November 5, 2026, after reporting a potential security issue with this external trading platform. The crypto exchange says its own systems have not been affected and that user funds remain protected. Deribit also revoked the affected accesses. Traders using SignalPlus are advised to immediately check their positions and current orders.
In brief
- Binance revokes all SignalPlus-related API keys after security alert.
- Deribit makes the same decision and notes no compromise of its systems.
- Users should check their locations and wait before reconnecting SignalPlus.
Binance removes all API keys related to SignalPlus
The decision fell on Thursday November 5. Binance has disabled connections allowing SignalPlus to interact with its users’ accounts. This precaution is reminiscent of the API key leak that occurred at 3Commas in December 2022, which had already led several crypto exchanges to revoke external access.
This time, no API key leaks have been publicly confirmed. In its announcement, Binance explains that it responded to a potential security issue reported directly by SignalPlus. The company did not specify the nature of the incident, the number of accounts affected or the existence of possible fraudulent transactions.
SignalPlus provides trading tools specializing in crypto derivatives and options. Its users can connect their accounts on different platforms to manage their strategies from an external interface.
These connections go through API keys. An API key allows an application to access certain features of an account without requiring a manual connection for each transaction. Depending on the authorizations granted, it can consult information or transmit trading orders.
Binance removed access associated with SignalPlus without waiting for the final conclusions of the investigation. The Deribit platform has taken a similar step. According to Reuters, it also examined its systems and found no evidence of compromise of its data or infrastructure. The two crypto exchanges therefore seek to limit a possible risk, without announcing any new confirmed hacking.
Crypto traders should check their orders
For SignalPlus users, revoking API keys may interrupt certain automated operations. A robot or strategy that depended on this connection will no longer be able to normally transmit new orders to Binance.
Positions already open, however, require separate verification. Binance recommends that affected customers log into their account directly, without going through SignalPlus, and then view their positions and pending orders.
This precaution makes it possible in particular to identify unusual transactions or orders which could remain active after the interruption of the connection. A revoked API key does not necessarily cancel orders already registered on the exchange.
The risks associated with these accesses are known. In December 2022, a trader reported losses on Binance after an API key associated with 3Commas was disclosed. The case had raised many questions about the security of automated trading services.
For SignalPlus, no comparable loss has been established in the available information. Binance also recommends waiting for confirmation that the issue has been completely resolved before creating new connections.
The exchange insists on the use of a whitelist of IP addresses. This feature limits the use of an API key to previously authorized network addresses. A potentially exposed key thus becomes more difficult to exploit from an unknown server. Changpeng Zhao, founder of Binance, also advised people using SignalPlus on other exchanges to revoke their API keys.
A new alert after the Binance hack
The incident comes a week after the historic hack on October 29, which affected approximately $6.34 billion in crypto assets at Binance.
The two cases should not be confused. The previous hack included compromised engineering computers, stolen credentials and the exploitation of internal services responsible for authorizing transactions.
The SignalPlus alert concerns connections granted to an external application. Binance is not announcing any new intrusions into its infrastructure. The platform also asked all of its technical partners to review their security controls, monitor unusual activity and immediately report any anomalies.
Third-party tools occupy an important place in crypto trading. They make it possible to automate complex strategies, follow several markets or manage positions on different exchanges.
Each connection nevertheless requires authorizations, the scope of which must remain limited to essential functions. For Binance, this new measure comes as the company is already continuing to strengthen its protections. Its previous investigation revealed several months of infiltration before the $6.34 billion hack. With SignalPlus, the exchange this time chooses to preventively cut off external access. The exact nature of the problem and its possible consequences remain to be clarified.
Maximize your Tremplin.io experience with our ‘Read to Earn’ program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.
