From Decrypt · By Decrypt Agent
In brief
Binance has removed all API keys linked to SignalPlus after the third-party crypto options trading platform reported a potential security issue.
The exchange said its own systems are unaffected and user funds are safe, and urged SignalPlus users to check their positions and open orders.
The move comes a week after Binance lost about $6.3 billion in a hack that the FBI has attributed to North Korea.
Binance has removed all API keys linked to SignalPlus, a third-party crypto trading platform, after SignalPlus reported a "potential security issue," the exchange said on Thursday.
"Binance's own systems are unaffected. User funds remain safe," the exchange said, describing the move as an "immediate precautionary measure."
Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure.
Binance's own systems are unaffected. User funds remain safe.
If you used SignalPlus, please… pic.twitter.com/0HYYkTAW2p
— Binance (@binance) November 5, 2026
API keys let third-party apps and trading tools connect to a user's exchange account and place trades on their behalf. Removing them cuts off that connection, meaning any automated strategies running on Binance through SignalPlus will stop until users set up new keys.
Binance urged SignalPlus users to log into their accounts directly to review their positions and open orders. It recommended that they wait until SignalPlus confirms the issue is fully resolved before reconnecting, and that they always enable IP whitelisting, which restricts an API key to approved internet addresses.
The exchange also called on all third-party platforms integrated with Binance to review their security controls, watch for unusual activity and contact it immediately if they spot any concerns.
SignalPlus, a Hong Kong-based platform that provides trading tools for crypto options and derivatives, connects to several exchanges, including Binance.
PredictCryptoBTC Highs in November
80,00050%YesNo82,50075%YesNo85,00054%YesNo87,50034%YesNo90,00023%YesNo+6 more outcomes+5 more outcomesNEW$96.13 volumeCloses: Dec 1, 2026, 04:59 UTCCloses: Dec 1, 2026, 04:59 UTCBinance's hack and recovery
The incident comes a week after Binance was hit by the largest hack in crypto history, in which attackers drained about $6.4 billion from its hot wallets on October 29. The FBI has attributed the theft to North Korean hackers it calls TraderTraitor, a claim Pyongyang has denied.
Binance has said the attack began when a fake recruiter persuaded one of its engineers to download a malware-laced coding assignment, and that the attackers then used stolen credentials to reach an internal wallet signing service.