Binance revokes SignalPlus API keys over suspected security breach

Citing an "immediate precautionary measure" after a potential hack at SignalPlus, Binance has removed all API keys associated with the crypto trading terminal.

On its X account today, Binance announced: "Binance’s own systems are unaffected. User funds remain safe."

In response to the same potential incident, Deribit, a crypto derivatives exchange, likewise removed all SignalPlus API keys.

We also encourage all third-party platforms integrated with Binance to review their security controls, monitor for unusual activity and contact us immediately if they detect any concern
This is not a challenge for any single company…… https://t.co/ESQaw3baqT

— Yi He (@heyibinance) November 5, 2026

Binance recommended that users check their positions and open orders, and wait for SignalPlus to confirm safety before "rebinding any API keys, and always enabling IP whitelisting."

For its third-party partners, the exchange also issued a call to "review their security controls, monitor for unusual activity and contact us immediately if they detect any concern."

A series of crypto hacks

Earlier this month, Binance suffered a $6.3 billion hack and is now working to restore withdrawals and replenish the stolen funds.

This month has also seen hacks at Brazilian exchange Mercado Bitcoin and BitMart.

SignalPlus maintains partnerships with major crypto firms, including Bybit, Gate.io, and OKX.

As of this writing, SignalPlus has not responded on X or Medium, and its press email is unreachable.