TL;DR
Security Response: Binance revoked all API keys linked to SignalPlus after the trading platform reported a potential security issue.
User Guidance: The exchange advised SignalPlus users to review open positions and orders directly through their accounts and wait for confirmation that the issue has been resolved.
Broader Context: The action comes as the exchange continues recovering from a recent $6.4 billion hack, restores services in phases, and replenishes most of the stolen assets from its own funds.
Binance has revoked all API keys connected to third-party trading platform SignalPlus after the company disclosed a potential security issue . The exchange said the measure was taken immediately as a precaution and stressed that Binance systems were not affected and user funds remain safe. API keys allow external trading tools to access exchange accounts and execute trades on behalf of users . By disabling the affected connections, the exchange effectively halted automated strategies running through SignalPlus until users create and configure new API credentials.
Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure.
Binance’s own systems are unaffected. User funds remain safe.
If you used SignalPlus, please… pic.twitter.com/0HYYkTAW2p
— Binance (@binance) November 5, 2026
Binance Takes Precautionary Action
According to the exchange, SignalPlus users should log into their accounts directly to review open positions and active orders . Binance also recommended waiting until SignalPlus confirms the issue has been fully resolved before reconnecting any services. The exchange encouraged users to enable IP whitelisting , a security feature that limits API access to approved internet addresses.
In addition, Binance called on all third-party platforms integrated with its ecosystem to review internal security controls , monitor unusual activity and immediately report potential concerns. SignalPlus, a Hong Kong-based provider of cryptocurrency options and derivatives trading tools, connects to several exchanges, including Binance.
Incident Follows Historic Hack
The development arrives just one week after Binance suffered what has been described as the largest hack in crypto history. Attackers stole roughly $6.4 billion from the exchange ‘s hot wallets on Oct. 29 . The FBI has attributed the theft to a North Korean hacking group known as TraderTraitor, an allegation that Pyongyang has denied . Binance previously said the breach began when a fake recruiter convinced one of its engineers to download a malware-infected coding assignment. The attackers allegedly used stolen credentials to gain access to an internal wallet-signing service .
Recovery Efforts Continue
Even as it responds to the SignalPlus situation, Binance is continuing recovery efforts related to the earlier attack . The exchange said it has already replenished about 98% of the stolen assets using its own funds and is still acquiring the remaining tokens, primarily through market and over-the-counter purchases. The exchange has also expanded its latest proof-of-reserves snapshot from 10 to 44 tokens . Meanwhile, the exchange continues reopening withdrawals in phases based on user demand. Deposits remain available, and the exchange said service restoration efforts are ongoing.
