Binance Disables SignalPlus API Keys Due to Security Threat

On November 5, 2026, cryptocurrency exchange Binance revoked all API keys associated with the third-party trading platform SignalPlus. The decision was made following a report from the service about a potential security issue. Binance described the disconnection as a precautionary measure and stated that its own infrastructure was not affected, and user funds are safe.

SignalPlus is a Hong Kong-based platform providing tools for trading cryptocurrency options and other derivatives. The service allows users to connect exchange accounts and manage trading strategies through an API interface.

API keys grant certain permissions to third-party applications to interact with a user's account. Depending on the settings, they can be used to obtain balance information, place orders, and manage positions without transferring funds to another platform.

Binance has not disclosed the nature of the alleged SignalPlus issue. It is still unknown whether the API keys were compromised, how many users might have been affected, and whether it led to unauthorized operations. There are no confirmed financial losses related to this incident.

What will change for SignalPlus users

After the revocation of keys, automated trading strategies that used SignalPlus's connection to Binance will not be able to send new commands through the previous connection. However, previously opened positions and placed orders are not necessarily closed automatically.

The exchange recommended that SignalPlus users log into their Binance accounts directly and check open positions and active orders. Reconnecting the service is advised only after official confirmation of the issue's resolution.

For new API keys, Binance also recommends using an IP whitelist. This setting restricts access to the interface to predefined network addresses and reduces the risk of key usage from an unknown connection.

Separately, the exchange addressed third-party platforms with a recommendation to check their own security mechanisms, monitor unusual activity, and report potential threats.

The new measures were introduced a week after a separate Binance hack on October 29, during which approximately $6.3 billion was stolen. As of November 4, the exchange reported replenishing about 98% of the affected assets using its own funds. A new reserve snapshot covering 44 tokens was also prepared.

No connection has been established between the previous attack and the SignalPlus issue. The timeline for full API integration restoration has not yet been announced.