Binance SignalPlus API Keys Pulled After Security Alert

The Binance SignalPlus API keys scramble is the latest jolt for crypto traders, and it landed just days after the biggest exchange hack ever. According to Reuters, Binance and Deribit said on Thursday that they removed every API key linked to SignalPlus after the trading platform reported a potential security issue.

What actually happened

SignalPlus is a digital asset options and derivatives trading infrastructure platform. Traders connect it to exchanges through API keys, which are basically digital passes that let software place trades for them. When SignalPlus flagged a possible security problem, Binance cut those passes as a precaution.

Binance stressed that its own systems were unaffected and that user funds remain safe. Deribit, the derivatives exchange, said it found no sign that its systems or data were touched after an investigation.

CZ tells users to revoke keys everywhere

Binance founder Changpeng Zhao went further on X. Reuters quotes him saying that anyone using SignalPlus on another exchange should revoke all their API keys right away.

The reason is simple. According to CoinDesk, compromised API keys can enable unauthorized trades even when withdrawals are switched off. Binance urged SignalPlus users to log in directly, review their positions and open orders, and wait until the issue is resolved before reconnecting.

Bad timing after a record heist

The news hits a market that is still shaking off a historic breach. The Straits Times reports that about six point three billion dollars in crypto was stolen from Binance within thirty minutes on October twenty-ninth, with attackers linked to North Korea draining its internet-connected hot wallets.

That is more than four times the one point five billion dollars taken from Bybit in February of last year, which had been the largest crypto heist on record. Binance says it froze about three billion dollars of the stolen funds and has covered roughly ninety-five per cent of the loss.

Reuters adds that last week Binance customers pulled three point six four billion dollars, or two point one per cent of its assets, as the exchange came back online on Sunday. Trust is clearly a big theme right now.

Bitcoin shrugs it off, for now

Prices have mostly looked past the drama. CoinDesk's morning briefing shows bitcoin sitting near eighty thousand dollars after a rebound that followed the US midterm results. Analysts quoted there still describe demand as tepid and leverage as missing, which is the polite way of saying the rally is not exactly roaring.

Other reports note that the Binance hack, outflows from US spot bitcoin funds and buying concentrated in leveraged futures keep weighing on sentiment. So the market is up, but nobody is calling it fully healed.

Why does this matter so much to everyday users? Because modern crypto trading is rarely one person clicking buttons. Bots, dashboards and options tools all lean on API connections, and each connection is a possible doorway. A single compromised pass can place trades on an account without ever touching the withdrawal screen, which is why exchanges move so fast once a partner reports trouble.

It also explains why Binance treated the alert as a company-wide cleanup rather than a single-account fix. Pulling every key linked to SignalPlus at once is blunt, but it removes the guesswork about which accounts might be exposed while the platform sorts out what went wrong. Users will need to reconnect later, and annoyance is a small price compared with surprise trades.

For newer traders, the takeaway is to treat API keys like passwords. Give each tool its own key, limit what it can do, and review the list every few weeks. Most people never open that settings page until something breaks, and that habit is exactly what attackers hope for.

What you should do if you trade

If you use any third-party trading tool, check which API keys are active on your exchange accounts today. Delete the ones you do not recognize, turn on withdrawal address whitelists, and avoid giving any tool more permissions than it needs.

The bigger lesson is that the Binance SignalPlus API keys episode shows how one weak link in a connected tool can ripple across several exchanges at once. Our crypto desk will keep following this story, and our tech coverage tracks the wider security fallout. Stay careful out there, because the next alert may come faster than you expect.