Binance cuts off SignalPlus API keys after the options platform reports a potential security issue

Published Thu, 05 Nov 2026 12:55:03 UTC · Updated Thu, 05 Nov 2026 20:15:00 UTC · Edited by Bizzle · AI-assisted

⚪NeutralBinance says its own systems and user funds are unaffected and frames the cut as a precaution at a third-party tool, so the direct market impact is limited beyond traders using SignalPlus automation.News sentiment, not financial advice. It reflects the likely impact of this news, not a price prediction.

Summary

Binance said Thursday it removed all API keys linked to third-party options and derivatives platform SignalPlus after SignalPlus reported a potential security issue, describing the step as an immediate precaution, CoinDesk and Decrypt reported.

The exchange said its own systems were unaffected and user funds remained safe, and it urged SignalPlus users to log into Binance directly to check positions and open orders and to wait until SignalPlus confirms a fix before reconnecting keys.

API keys let external apps place trades without repeated logins; compromised keys can enable unauthorized trades even when withdrawals are disabled, both outlets noted.

The move comes about a week after Binance's roughly $6.3–$6.4 billion hot-wallet hack; CoinDesk said co-founder Changpeng Zhao urged users to revoke SignalPlus keys on other exchanges as well and said Deribit had also reported the issue.

Updates

Update, Thu, 05 Nov 2026 20:15:00 UTC: Update (Nov. 5, afternoon): Deribit also revoked SignalPlus API keys. SignalPlus said attackers compromised an engineer's computer via a fake Teams invite, causing losses under $82,000 that it pledged to reimburse in full, Cointelegraph reported.

Key facts

Decrypt quoted Binance: "Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure. Binance's own systems are unaffected. User funds remain safe." (Decrypt)
Binance recommended enabling IP whitelisting for API keys and called on other connected platforms to review security controls. (CoinDesk)
Decrypt described SignalPlus as a Hong Kong-based platform that connects to several exchanges including Binance for crypto options and derivatives tools. (Decrypt)
Decrypt said Binance reported Wednesday it had replenished about 98% of assets stolen in the Oct. 29 hack from its own funds and was still buying the rest, mostly less liquid tokens. (Decrypt)