Binance and Deribit revoke SignalPlus-linked API keys due to a potential security issue.
Regulation & Gov ·
Binance and Deribit have revoked API keys tied to SignalPlus, a third-party trading platform, following a reported security issue. Binance stated that its own systems remain unaffected and that user funds are secure. The exchange advised SignalPlus users to verify their positions and open orders directly through Binance's interface and to activate IP whitelisting as a protective measure.
The revocation of API keys cuts off SignalPlus's ability to access user accounts on both exchanges through its platform. API keys typically grant third-party applications permission to execute trades and view account data on behalf of users. According to reports, the security concern prompted both major exchanges to restrict the service simultaneously, though details of the underlying vulnerability remain undisclosed.
The scope and severity of the original security issue at SignalPlus have not been publicly detailed. It is unclear whether the issue affected user data, trading activity, or both, or whether SignalPlus itself was the source of the vulnerability or merely a vector through which it was discovered.