Binance Revokes SignalPlus API Keys After Platform Reports Security Issue

Binance removed all API keys associated with SignalPlus on Nov. 5, 2026, after the third-party crypto derivatives trading tool disclosed an internal "potential security issue" ¹. The exchange stated that its internal systems were not compromised and that customer funds remain safe ¹.

Removing the API credentials severed active connections between Binance accounts and SignalPlus, automatically halting all running algorithmic and options trading strategies ¹. Binance instructed customers who use the Hong Kong-based platform to sign in directly to inspect open orders and derivatives positions ¹. The exchange advised clients not to generate new keys until SignalPlus verifies the vulnerability has been patched, recommending that traders restrict future credentials through IP address whitelisting ¹. Additionally, Binance prompted all third-party software vendors integrated with its systems to audit their security architecture and report any suspicious behavior ¹.

Exchange Recovery Context

The defensive cut comes shortly after attackers executed a $6.4 billion drain on Binance hot wallets on Oct. 29, 2026, an exploit the FBI attributed to the North Korean threat group TraderTraitor ¹. Binance had previously outlined how an engineer downloaded malware disguised as a recruitment assignment, compromising internal signing services, as reported in Binance Details Breach Path in $6.34 Billion Hot Wallet Theft ¹.

Binance reported on Nov. 4 that it had replenished roughly 98% of the drained tokens using company reserves, acquiring the remainder across open and over-the-counter markets ¹. The platform is also generating a zero-knowledge proof-of-reserves snapshot expanding coverage across 44 assets, while progressively resuming token withdrawals following earlier operational halts covered during the Binance Halts Withdrawals Following Massive Multi-Billion-Dollar Exploit period ¹.