Binance and Deribit revoke SignalPlus API keys after breach

Binance cut its connections with the crypto trading platform SignalPlus on Nov. 5, after a security warning. The exchange said it removed all API keys linked to SignalPlus as an immediate precaution. In its advisory, Binance said its own systems were unaffected and that user funds stayed safe.

API keys let software reach an exchange account within the permissions a user grants. Binance told SignalPlus users to check positions and open orders through its own platform. It also recommended waiting until SignalPlus confirms full resolution before reconnecting keys, and turning on IP whitelisting.

Deribit issued its own notice saying it had revoked all customer API keys connected to SignalPlus. According to Deribit, that stopped trading, monitoring and automation through the SignalPlus connection. The exchange said its systems and data were unaffected.

Deribit directed users to check their accounts on Deribit itself. Its guidance covered open orders, positions and recent account activity. The @DeribitOfficial account also recommended IP allowlisting and waiting for official communication from SignalPlus before reconnecting.

SignalPlus later said attackers had broken into its network after an engineer was tricked with a fake Microsoft Teams meeting invitation. The platform described an attack it detected in the early hours of Nov. 4.

In a statement, SignalPlus put losses below $82,000 in its assessment to date. The company said it had begun reimbursing affected users and pledged to repay all of them in full.

The reported exchange actions and guidance are not independent proof that accounts are safe. The published material does not show specific user permissions, the status of order execution, or a completed recovery at SignalPlus.

What remains open is SignalPlus's full confirmation that the incident is resolved, which both exchanges named as the condition for reconnecting keys. Until then, the practical step is checking accounts directly on Binance or Deribit.