Binance announced on Thursday, November 5, 2026, that it had proactively removed all API keys linked to SignalPlus after the crypto options platform reported a potential security issue. The exchange described the move as an immediate precaution, adding that its own systems were unaffected and that user funds remain safe.
Binance advised SignalPlus users to log into their Binance accounts directly to review positions and open orders, and to wait until SignalPlus confirms full resolution before rebinding any API keys. It also recommended enabling IP whitelisting and called on every third-party platform integrated with Binance to review security controls, monitor for unusual activity, and report any concerns immediately.
Deribit likewise revoked all customer API keys connected to SignalPlus the same day. The exchange warned that all trading, monitoring, and automation run through SignalPlus on Deribit had stopped, and told users to wait for official confirmation from SignalPlus before reconnecting. Binance co-founder Changpeng Zhao extended the warning to other venues, writing that anyone using SignalPlus for any exchange platform should revoke all their API keys.
SignalPlus, founded in 2021 and based in Hong Kong, offers options trading dashboards for Deribit, Binance, Bybit, OKX and Coincall. It reached a $500 million post-money valuation after a $50 million HashKey Capital-led Series B1 round in June, has raised about $73 million, and handled $160 billion in volume during Q4 2025. The security advisory comes about a week after attackers took $6.3 billion from Binance’s hot wallets on October 29; the FBI has tied that exploit to North Korea’s TraderTraitor group. Exchange API key leaks have occurred before, including the 3Commas incident in late 2022, when unauthorized trades hit FTX and Binance accounts and the CEO later admitted customer keys had leaked from 3Commas.
