Binance has removed every API key linked to SignalPlus after the third-party trading platform reported a potential security issue. The exchange described the action as an immediate precautionary step taken on November 5, 2026, and stated that its own systems were unaffected while customer funds remained safe.

SignalPlus, a Hong Kong-based provider of trading tools focused on cryptocurrency options and derivatives, allows users to connect exchange accounts through API keys. These keys enable external platforms to view account data and execute trades on behalf of users without requiring repeated logins. The revocation severs those connections on Binance, disrupting any automated strategies that relied on the integration until new keys can be created.

Official Response and User Guidance

In its announcement, Binance instructed customers who had used SignalPlus to log into their exchange accounts directly and examine their trading positions along with any open orders. The exchange recommended waiting until SignalPlus confirms the issue has been fully resolved before establishing new API connections. It also advised enabling IP whitelisting on future keys, a setting that limits access to approved internet addresses and reduces the risk of unauthorized use.

Binance further called on all third-party platforms integrated with its systems to review their security controls, monitor for unusual activity, and report any concerns without delay.

Broader Warnings from Leadership

Binance founder Changpeng Zhao, known as CZ, extended the caution beyond the exchange. He urged traders using SignalPlus on any other platform to revoke their API keys immediately and generally advised against storing exchange credentials with external service providers. Zhao noted that derivatives exchange Deribit had also reported the issue and taken similar steps.

Binance co-founder Yi He added that the situation was not limited to one company. She directed the security review message at third-party integration partners as a group and stressed the need for continuous monitoring.

Context of Recent Events

The API key revocation arrives roughly one week after Binance experienced a major security incident on October 29 in which attackers moved approximately $6.3 billion to $6.4 billion from hot wallets. The Federal Bureau of Investigation has attributed that earlier event to North Korean actors, a claim denied by Pyongyang. Binance has reported recovering or replenishing about 98 percent of the affected assets from its own resources and continues phased restoration of withdrawal services.

Neither Binance nor SignalPlus has publicly detailed the nature or scope of the potential security issue at the trading platform, nor has either confirmed whether any user accounts or funds were compromised through the SignalPlus connection. Automated trading activity that depended on the revoked keys has been interrupted for affected users, who must generate fresh credentials once the matter is cleared.

API permissions that allow order placement can enable unauthorized trading activity even when withdrawals are restricted. Industry participants have previously encountered similar risks with third-party trading tools, reinforcing the practice of limiting key permissions and applying network restrictions such as IP whitelisting.