Binance removed API keys linked to SignalPlus as a precaution after the Hong Kong-based trading platform reported a potential security issue. The keys allowed SignalPlus to connect to users’ Binance accounts and place trades. Revoking them cuts that connection and stops automated strategies running through SignalPlus until users establish new access.
Binance said its own systems were unaffected and user funds remained safe. It urged affected customers to log in to Binance directly to review their positions and open orders, and to wait for SignalPlus to confirm that the issue is fully resolved before reconnecting. The exchange also recommended IP whitelisting and called on third-party platforms integrated with Binance to review their security controls. An earlier report noted no significant market disruption or price impact tied to the revocation.
The action came a week after about $6.4 billion was stolen from Binance hot wallets on October 29. The FBI attributed the theft to North Korean attackers, a claim Pyongyang denied. Binance said it had replenished about 98% of the stolen assets with its own funds and was still working to acquire the remainder. SignalPlus, founded in 2021, provides trading tools for digital assets, including options and derivatives. For its Binance users, the immediate effect of the revocation is operational: they need to review account activity and wait for confirmation before reconnecting.