Binance removes SignalPlus API keys after security warning

Binance removed all API keys linked to SignalPlus on Thursday, Nov. 5, after the trading platform reported a potential security issue. The move cuts off SignalPlus’s connection to Binance accounts while users check their trades. Binance said its systems were unaffected and user funds remained safe, according to Binance’s security notice.

What did Binance ask SignalPlus users to do?

Binance told users to sign in to their accounts directly and review their positions and open orders. It advised them to wait until SignalPlus confirms the issue is fully resolved before linking API keys again.

An API key lets an outside app connect to an exchange account and place trades for the user. Removing the keys means SignalPlus can no longer use those connections on Binance. Any trading activity that relied on them may need to be managed directly on Binance until access is restored.

Binance also advised users to enable IP whitelisting, which limits API access to approved internet addresses. The exchange asked other platforms connected to Binance to review their security controls and watch for unusual activity.

What is known about the security issue?

Binance described the issue as one reported by SignalPlus, but did not give details about what happened. Its notice called the removal of the keys an immediate precaution. CoinDesk reported that Binance made the move after SignalPlus reported a potential security issue; the exchange said its own systems were unaffected.

SignalPlus offers trading tools for digital asset options. The reported issue concerns that third-party platform, and the public information available in Binance’s notice does not establish that Binance accounts or funds were breached.

Could other exchange accounts also be affected?

Binance co-founder Changpeng Zhao urged users to revoke SignalPlus API keys on other exchanges too, CoinDesk reported. That advice matters to people who connected SignalPlus to more than one account: removing keys from Binance does not automatically remove them elsewhere.

Users should check each exchange account they linked to SignalPlus and review recent positions and open orders. Binance’s advice is to reconnect only after SignalPlus confirms the issue is resolved. The platform’s security notice did not say when that confirmation would come or describe a timeline for restoring API access.

References

• Binance’s security notice — binance.com