- Binance has revoked all API keys connected to third-party trading platform SignalPlus after receiving reports of a potential security issue.
- Binance founder Changpeng Zhao urged traders using SignalPlus on other exchanges to revoke their API credentials as a precaution.
- The warning follows the reported $6.34 billion Binance hack on Oct. 29, although no evidence has established a connection between the two incidents.
Binance has removed all API keys associated with SignalPlus after the third-party cryptocurrency trading platform reported a potential security issue.
The exchange announced the precautionary measure on X, explaining that the decision was intended to protect customers from possible risks involving external trading integrations.
Binance emphasized that its internal systems were not affected and that customer funds remained secure.
The development comes approximately one week after the exchange suffered a separate security breach involving an estimated $6.34 billion in stolen cryptocurrency.
However, there is currently no publicly established connection between the two incidents.
Binance Removes SignalPlus API Access
Binance said it proactively invalidated all API credentials linked to SignalPlus after receiving information about a possible security problem.
“Binance’s own systems are unaffected. User funds remain safe,” the exchange stated.
SignalPlus is a Hong Kong-based financial technology company offering AI-powered trading tools, options analytics and cryptocurrency execution services.
Its platform connects to exchanges through application programming interfaces, allowing traders to manage positions and execute transactions without transferring their assets away from the exchange.
However, API credentials can create security risks when external platforms are compromised or improperly configured.
Following the warning, Binance advised affected customers to review their existing trading positions and outstanding orders directly through their exchange accounts.
The company also recommended waiting until SignalPlus confirms that the issue has been resolved before reconnecting the service.
Additionally, Binance encouraged customers to enable IP whitelisting, which limits API access to approved internet addresses.
CZ Warns Traders About Third-Party API Keys
Binance founder Changpeng Zhao, widely known as CZ, issued a broader warning to cryptocurrency traders following the announcement.
“If you use SignalPlus for any other exchange platform, it’s time to revoke all your API keys,” Zhao wrote on social media.
His recommendation extended beyond Binance, suggesting that customers should review SignalPlus integrations connected to other cryptocurrency exchanges.
Zhao also advised users against storing exchange API credentials with third-party services whenever possible.
He referenced cryptocurrency derivatives exchange Deribit, which had reportedly raised concerns about the SignalPlus issue.
Binance co-founder Yi He also confirmed that the exchange’s internal systems remained unaffected.
She encouraged users to inspect open orders, avoid immediately reconnecting affected credentials and activate IP whitelisting.
However, the precise nature of the SignalPlus security issue has not been publicly established.
It also remains unclear whether any customer API credentials were accessed or compromised.
SignalPlus Warning Follows $6.34 Billion Binance Hack
The latest security precaution follows Binance’s reported Oct. 29 breach, which involved approximately $6.34 billion in stolen cryptocurrency.
According to reports, attackers compromised 17 hot wallets across multiple blockchain networks after gaining unauthorized access to wallet-signing infrastructure.
The incident reportedly involved compromised developer systems and malicious software.
The FBI attributed the attack to North Korea’s TraderTraitor group, which has also been linked to the February 2025 Bybit hack.
North Korea denied responsibility.
Following the breach, stablecoin issuers and industry partners reportedly froze or intercepted approximately $2.85 billion in cryptocurrency.
Binance pledged to cover customer losses and began gradually reopening withdrawals on Nov. 1.
By early Nov. 5, blockchain tracking estimates suggested that attackers still controlled approximately $3.2 billion in cryptocurrency, primarily Bitcoin and Ethereum.
Despite the timing, the SignalPlus warning involves a different security concern.
The earlier Binance breach reportedly affected internal wallet infrastructure, while the latest precaution concerns API credentials connected to an independent trading service.
Binance maintains that its systems and customer funds remain unaffected by the SignalPlus issue.
For now, traders using third-party API integrations are being encouraged to review their permissions and strengthen account security while additional details emerge.
