Binance revoked every API key linked to SignalPlus on November 5 after the trading platform reported a potential security issue. Binance said its internal systems remained unaffected and customer funds stayed safe after the precautionary removal.
The move prompted founder Changpeng Zhao to urge traders using SignalPlus on other exchanges to revoke their API connections. Derivatives exchange Deribit also removed SignalPlus-linked keys and found no evidence that its systems or data had been compromised.
SignalPlus provides digital asset trading infrastructure, connecting exchange accounts with external tools through API credentials. Depending on the permissions granted, these connections can provide account access and allow external applications to place trades. Removing the keys cuts off SignalPlus access to Binance accounts and interrupts automated strategies using the integration.
Zhao issued a wider warning on X, telling traders to review connections beyond Binance and Deribit.
“If you use SignalPlus for any other exchange platform, it’s time to revoke all your API keys,” Zhao wrote.
He also cautioned traders against storing exchange API credentials with outside service providers. Binance asked affected customers to sign in directly and inspect open orders alongside their active trading positions.
The exchange advised users not to reconnect SignalPlus until the provider confirms that the issue has been fully resolved. Binance also recommended IP whitelisting for future API connections, restricting access to approved internet addresses.
Co-founder Yi He urged integration partners to strengthen security checks, monitor unusual activity, and report concerns promptly.
“This is not a challenge for any single company,” Yi He wrote, extending the warning beyond SignalPlus.
The incident follows Binance’s separate October 29 security breach, which intensified scrutiny of exchange security practices. Reuters reported that Binance customers withdrew USD 3.64 billion after the exchange resumed operations following that attack.
Binance said it had covered 95% of the approximately USD 6.3 billion in stolen assets, Reuters reported. Neither Binance nor SignalPlus has disclosed the latest issue’s technical details or confirmed any customer losses.
The revocation disrupts SignalPlus-linked automated trading, while customers can still manage orders directly through Binance.
Also Read: Binance Reveals Fake Job Interview Behind USD 6.3 Billion Cryptocurrency Hack