Binance and Deribit revoke SignalPlus API keys after security report
19 sourcesUpdated Nov 6, 20261 min read
Sponsored
On Nov. 5, 2026, Binance and Deribit revoked all API keys linked to SignalPlus after it reported a potential security issue. Binance said the step was precautionary, its systems were unaffected, and user funds remained safe. Users were told to check positions on Binance directly, wait for SignalPlus confirmation before rebinding keys, and enable IP whitelisting. Deribit said all SignalPlus trading, monitoring, and automation on its venue had stopped. Changpeng Zhao urged users on other exchanges to revoke their SignalPlus API keys. The action came a week after a $6.3 billion breach of Binance hot wallets on Oct. 29, 2026, tied by the FBI to North Korea's TraderTraitor group. SignalPlus, a Hong Kong platform founded in 2021, is valued at $500 million after a June $50 million raise and handled $160 billion volume in Q4 2025. In late 2022, 3Commas CEO Yuriy Sorokin admitted that leaked API keys enabling unauthorized FTX and Binance trades had originated from 3Commas. WHAT'S CONTESTED: Binance states its systems are unaffected and user funds remain safe. The record does not disclose the nature or scope of the SignalPlus issue, and no customer losses have been confirmed. SignalPlus had not issued its own account in the reports.
How it spread
What each side asserts, disputes — or leaves out entirely.
Whose framing of this story rings truest to you?
SignalPlus dropping the ball on security makes me less likely to trust any third party tools with my accounts.
Binance did the right thing pulling those keys right away even if funds are safe for now.
