WirecompaniesDextape brief
Binance Pulls Every SignalPlus API Key, Tells Users to Check Their Positions and Orders
Binance said its own systems and user funds were unaffected, but neither it nor SignalPlus has said what the issue was or whether anyone lost money.
Dextape brief
On Thursday, November 5, Binance cut off every credential that SignalPlus used to reach its users' accounts after SignalPlus flagged a possible security concern. The exchange called it a precaution taken right away and said, in an X post at 10:51 UTC, that its own infrastructure was untouched. Binance told users to log in directly, review positions and open orders, avoid reconnecting keys until SignalPlus confirms the issue is resolved, and enable IP whitelisting. Co-founder Changpeng Zhao urged SignalPlus users on other exchanges to revoke keys and said Deribit had reported the issue, a claim Unchained could not verify. Binance did not disclose the nature of the problem, the number of affected accounts, or any losses, and SignalPlus had not issued a statement.
Why it matters: A security problem at a connected tool can expose exchange accounts, because the keys granting access sit with the outside platform rather than the exchange.
Read the full story