Binance, Deribit revoke SignalPlus API keys after security scare
Regulation & Gov ·
Both exchanges cut off access tied to the third-party trading platform and told users to wait for resolution while confirming funds remain safe.
Binance and Deribit have revoked API keys linked to SignalPlus following a potential security issue at the third-party trading platform, according to Decrypt. The move cuts off automated trading access for users who relied on SignalPlus to connect to the two exchanges.
Binance said the action was a precaution tied specifically to SignalPlus's systems rather than any compromise of its own infrastructure, and stated that user funds on its platform are unaffected, per Decrypt. Deribit took the same step on its end, revoking SignalPlus-linked keys as well, with both exchanges confirming that user funds remain safe, as reported by WuBlockchain.
API keys are the credentials that let third-party platforms like SignalPlus execute trades or pull account data on behalf of users without requiring direct login access. Revoking those keys effectively severs SignalPlus's ability to interact with Binance and Deribit accounts until the underlying issue is identified and resolved.
Both exchanges have advised affected users to wait for resolution before attempting to restore connectivity, suggesting the investigation into the potential security issue at SignalPlus is still ongoing. The cluster of reporting, corroborated across four distinct sources, consistently frames the response as precautionary rather than indicative of a confirmed breach affecting either exchange's core systems.
What remains unclear is the exact nature of the security issue at SignalPlus, whether any user data or assets connected to the platform were exposed, and how long the API suspension will last. Neither Binance nor Deribit has specified a timeline for reinstating access, leaving SignalPlus users unable to resume automated trading through the platform until further updates are issued.