Binance and Deribit severed API key connections to crypto options platform SignalPlus on November 5, 2026, following a security breach at the Hong Kong startup. SignalPlus confirmed hackers stole under $82,000 in user funds after compromising an engineer via a fake Microsoft Teams invite sent from a compromised Telegram account. Binance reported its internal systems and funds remain safe, urging users to revoke keys and enable IP whitelisting.
Exchanges revoke SignalPlus API keys
- ▪Binance proactively removed all API keys linked to Hong Kong-based trading platform SignalPlus on November 5, 2026, after SignalPlus reported a potential security issue
- ▪Binance advised SignalPlus users to review open orders and positions directly on Binance and wait for SignalPlus to confirm resolution before rebinding API keys with IP whitelisting enabled
- ▪Crypto derivatives exchange Deribit removed all SignalPlus API keys
Binance security response and advisories
- ▪Binance stated that its own internal systems were unaffected by the security incident at SignalPlus disclosed on November 5, 2026, and customer funds remained safe
- ▪Binance urged all third-party platforms integrated with the exchange to review their security controls and report any unusual activity immediately
- ▪Binance co-founder Changpeng Zhao urged traders to revoke SignalPlus API keys across all platforms and advised against storing API keys with third-party platforms
Earlier Binance hack attributed to North Korea
- ▪The Federal Bureau of Investigation attributed the October 29, 2026 Binance breach to the North Korean hacking group known as TraderTraitor
- ▪Binance suffered a major security breach on October 29, 2026, resulting in the theft of approximately $6.3 billion to $6.4 billion from its hot wallets
Story comments
Loading comments…