API Keys Revoked: Why Binance Just Blocked SignalPlus Connections
Binance said on Thursday it has removed all API keys linked to SignalPlus after the crypto options platform reported a potential security issue.
The exchange called the removal an immediate precaution and said its own systems were unaffected and user funds remain safe, though SignalPlus users should log in to Binance directly to review their positions and open orders.
It also advised those users to wait until SignalPlus confirms full resolution before binding any new keys. Beyond those customers, Binance asked every third-party platform integrated with it to review its security controls.
Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure.
Binance’s own systems are unaffected. User funds remain safe.
If you used SignalPlus, please log into your Binance account directly to review your positions and open orders. We recommend waiting until SignalPlus confirms full resolution before rebinding any API keys, and always enabling IP whitelisting.
We also encourage all third-party platforms integrated with Binance to review their security controls, monitor for unusual activity and contact us immediately if they detect any concern
— Binance (@binance) November 5, 2026
Deribit Cuts Access Too
Deribit also revoked every customer API key connected to SignalPlus that day, saying the latter had informed it of a potential security concern. As a result, all trading, monitoring, and automation run through SignalPlus on Deribit have stopped, the exchange warned. It told users planning to reconnect to wait for official word from the SignalPlus team.
SignalPlus, formed in 2021, offers options trading dashboards for Deribit, Binance, Bybit, OKX and Coincall. Binance founder Changpeng Zhao (CZ) extended the warning to those other venues.
“If you use SignalPlus for any other exchange platform, it’s time to revoke all your API keys,” Zhao wrote on X.
The SignalPlus alert comes a week after attackers took $6.3 billion from Binance’s hot wallets on October 29. The FBI has tied those attackers to North Korea’s TraderTraitor group.
Third-Party Keys Have Leaked Before
An exchange API key lets outside software trade on an account without the user’s password. That access has made trading tools a target before.
Users of one such tool, 3Commas, reported unauthorized trades on FTX and Binance accounts in late 2022. Its CEO, Yuriy Sorokin, first disputed that the tool was at fault. Sorokin then admitted in December 2022 that the leaked customer API keys came from 3Commas.