Richard Teng: Binance Revokes All SignalPlus API Keys After Security Warning
Image: Binance

Binance Revokes All SignalPlus API Keys After Security Warning

Binance removed all API keys linked to SignalPlus on Nov. 5 after the options trading platform reported a potential security issue. The exchange says its systems were unaffected and user funds remain safe, but has not disclosed whether any accounts saw losses.

Ibrahim RajabNovember 5, 20262 min read
Share

Every API key linked to SignalPlus is gone from Binance. The exchange pulled them on Nov. 5 after the third-party trading platform reported a potential security issue, cutting the integration as a precaution. Binance said its own systems were unaffected.

"User funds remain safe,"

That was Binance's line.

Post by @binance on X
@binance on X

View the post on X

Binance attributed the warning to SignalPlus. It did not describe the underlying issue or give a timetable for a fix. It also did not say whether any accounts saw unauthorized trades, withdrawals or losses, or how many accounts were connected through SignalPlus.

The scale of any impact is unknown.

What users were told

Binance gave SignalPlus users three instructions:

  • Log into Binance directly to review positions and open orders.
  • Wait until SignalPlus confirms a full resolution before reconnecting API keys.
  • Enable IP whitelisting.

Other integrated third-party platforms got a warning too: review security controls, monitor unusual activity, report concerns immediately.

What SignalPlus does

SignalPlus runs a crypto options trading dashboard with pricing, analytics and automated trading tools. Users connect exchange accounts through API keys, which lets them trade spot, futures and options through SignalPlus while their assets stay on the exchange. Its Binance setup guide describes separate trading and read connections and tells users to disable withdrawal permission.

The firm is a Hong Kong-based fintech founded in 2021. It has raised $73M, including a $50M Series B in 2026, and promotes ISO/IEC 27001 and SOC 2 certifications plus an A+ penetration-testing rating.

Impact so far

Pulling the keys cuts the link between Binance accounts and SignalPlus. The move does not appear to target funds directly. Any automated strategy running through SignalPlus on Binance stops until users set up new keys.

No significant market disruption or price impact so far.

Context

The revocation comes two days after Binance detailed how a fake job interview led to its $6.3B hack. Binance has not linked the two events, and nothing in the SignalPlus disclosures points to a connection.

Discussion

Loading comments...