---
title: "Binance Revokes SignalPlus API Keys After Platform Reports Security Issue"
description: "The exchange severed third-party connections as a precautionary measure while user funds remain unaffected, halting automated strategies."
url: https://basisdesk.news/news/binance-revokes-signalplus-api-keys-security-issue
published: 2026-11-05T12:31:12.270Z
modified: 2026-11-05T12:31:12.270Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: neutral
tickers: []
tags: [binance, signalplus, api-security, derivatives, cybersecurity]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# Binance Revokes SignalPlus API Keys After Platform Reports Security Issue

The exchange severed third-party connections as a precautionary measure while user funds remain unaffected, halting automated strategies.

## At a glance

- **What happened:** Binance deleted all API keys connecting its exchange accounts to third-party derivatives tool SignalPlus on Nov. 5, 2026.
- **Why it matters:** The measure stops all active automated trading strategies executed through SignalPlus to prevent unauthorized access via potential external vulnerabilities.
- **Who is affected:** Binance users running automated derivatives or options strategies through SignalPlus.
- **Takes effect:** 2026-11-05
- **What's next:** SignalPlus must confirm the security problem is resolved before users can safely reconnect new API credentials.
- **Primary source:** [Binance Cuts Off SignalPlus API Keys Over 'Potential Security Issue' at Trading Platform](https://decrypt.co/382599/binance-cuts-off-signalplus-api-keys-over-potential-security-issue-at-trading-platform) — decrypt.co

## Key points

- Binance deleted all SignalPlus API keys on Nov. 5, 2026, following a security issue report from the trading software platform.
- The exchange confirmed customer funds and core infrastructure were unaffected, but active third-party automated trades were halted.
- The step follows the Oct. 29 exploit of Binance hot wallets, of which the exchange says it has replenished roughly 98% of assets.

## Editorial remark

- **Context:** The move reflects extreme operational sensitivity at Binance, which suffered a $6.4 billion hot wallet theft on Oct. 29 attributed by the FBI to North Korean actors.
- **Impact:** Traders utilizing SignalPlus have had automated options strategies stopped, requiring manual order management and delayed credential regeneration.
- **Watch:** SignalPlus confirmation that the security issue is resolved, alongside Binance's zero-knowledge proof-of-reserves update expected in roughly 50 to 60 hours.

Binance removed all API keys associated with SignalPlus on Nov. 5, 2026, after the third-party crypto derivatives trading tool disclosed an internal "potential security issue" [1]. The exchange stated that its internal systems were not compromised and that customer funds remain safe [1].

Removing the API credentials severed active connections between Binance accounts and SignalPlus, automatically halting all running algorithmic and options trading strategies [1]. Binance instructed customers who use the Hong Kong-based platform to sign in directly to inspect open orders and derivatives positions [1]. The exchange advised clients not to generate new keys until SignalPlus verifies the vulnerability has been patched, recommending that traders restrict future credentials through IP address whitelisting [1]. Additionally, Binance prompted all third-party software vendors integrated with its systems to audit their security architecture and report any suspicious behavior [1].

## Exchange Recovery Context

The defensive cut comes shortly after attackers executed a $6.4 billion drain on Binance hot wallets on Oct. 29, 2026, an exploit the FBI attributed to the North Korean threat group TraderTraitor [1]. Binance had previously outlined how an engineer downloaded malware disguised as a recruitment assignment, compromising internal signing services, as reported in [Binance Details Breach Path in $6.34 Billion Hot Wallet Theft](https://basisdesk.news/news/binance-details-breach-path-hot-wallet-drain) [1]. 

Binance reported on Nov. 4 that it had replenished roughly 98% of the drained tokens using company reserves, acquiring the remainder across open and over-the-counter markets [1]. The platform is also generating a zero-knowledge proof-of-reserves snapshot expanding coverage across 44 assets, while progressively resuming token withdrawals following earlier operational halts covered during the [Binance Halts Withdrawals Following Massive Multi-Billion-Dollar Exploit](https://basisdesk.news/news/binance-pauses-withdrawals-multibillion-dollar-exploit) period [1].

## Sources

1. [Binance Cuts Off SignalPlus API Keys Over 'Potential Security Issue' at Trading Platform](https://decrypt.co/382599/binance-cuts-off-signalplus-api-keys-over-potential-security-issue-at-trading-platform) — decrypt.co, 2026-11-05

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai