TLDR:
- Binance API keys linked to SignalPlus were revoked after the platform reported a potential security issue, cutting off the external connection as a precaution.
- Binance said its internal systems were unaffected and that user funds remained safe, but it did not disclose whether unauthorized activity occurred.
- SignalPlus users were told to inspect positions and open orders directly on Binance before reconnecting any credentials or relying on the platform again.
- Binance recommended IP whitelisting and urged other integrated platforms to review controls, monitor unusual activity, and report security concerns promptly.
Binance API keys tied to SignalPlus were revoked on Nov. 5 after the third-party trading platform reported a potential security issue. The exchange said its internal systems were unaffected and that user funds remained safe. However, Binance did not disclose whether connected accounts experienced unauthorized trades, withdrawals, or losses. It also did not identify the number of affected accounts.
Traders who used the integration should log into Binance directly and inspect their positions and open orders. Binance advised them to wait for SignalPlus to confirm a full resolution before reconnecting. It recommended IP whitelisting to restrict access to approved addresses.
Binance API Keys Cut Off SignalPlus Trading Access
Binance said it removed all keys associated with SignalPlus as a precaution. The action followed a warning from SignalPlus about a potential security issue on its platform. Binance did not explain the vulnerability, name the affected component, or provide a timetable for restoring the connection. The exchange also did not say how many accounts used SignalPlus.
The removal of Binance API keys cut off SignalPlus access through the revoked credentials. API keys let approved external software read account information or execute trades. Their capabilities depend on permissions selected by each customer. Removing the credentials blocks the integration, even when a trader previously authorized trading access.
SignalPlus operates a crypto options dashboard with pricing, analytics, and automated trading tools. Its Binance setup guide describes separate connections for trading and account data. Users can select permissions for spot and margin trading, futures, and options. The guide also instructs users to disable withdrawal permission. That setting limits what connected software can do if its credentials are compromised.
Users with Binance API keys should therefore treat the revoked connection as inactive. They should not rely on SignalPlus to show current exposure or order status. Binance’s instruction to check the exchange directly places account verification inside Binance’s own interface.
Binance API Keys Guide Users Through the Security Review
Binance told affected traders to open the exchange directly and review positions and open orders. This check can reveal whether orders remain active and whether current exposure matches expectations. Traders can then cancel orders or adjust positions from Binance, without depending on the disconnected dashboard.
Binance has not confirmed any unauthorized activity linked to SignalPlus. It has also not stated whether any customer suffered a loss. Those omissions leave the reported security issue unresolved in public disclosures. SignalPlus must confirm that its systems are secure before users consider reconnecting the Binance API keys.
API keys do not automatically grant every account privilege. Users can choose read-only, trading, or withdrawal permissions when creating credentials. The narrower the permission set, the fewer actions an external service can perform. Binance’s advice to disable withdrawals reflects that principle, although users still need to revoke unfamiliar credentials and review account activity after any security warning appears.
IP whitelisting offers another layer of protection. It permits API requests only from specified internet addresses. That control can reduce exposure when users connect an exchange account to external software. It does not replace careful permission settings or direct account checks.
The incident also prompted Binance to address other integrated platforms. The exchange urged them to review security controls, watch for unusual activity, and report concerns without delay. That broader warning highlights the risks created when traders give outside services access to exchange accounts.
SignalPlus users should monitor account notifications and transaction records while the investigation continues. They should also confirm that no unfamiliar orders or permissions remain active. Binance provided no timetable for a wider resolution, leaving users dependent on further updates from both companies.
