Binance and Deribit revoke SignalPlus API keys over security vulnerability
CIE News ·
Confirmed by 3 independent news outlets.
Binance and Deribit removed all API credentials linked to SignalPlus on November 5, 2026, after the trading infrastructure firm reported a potential security issue. Both exchanges stated their own systems were unaffected.
Binance and Deribit removed all API keys connected to trading infrastructure provider SignalPlus on November 5, 2026, following a potential security issue reported by the platform. Deribit confirmed it took the precautionary step after receiving notice from SignalPlus, adding that an investigation found no impact on its internal systems or user data. Binance also stated that its systems remained unaffected and customer assets were safe.
The action disabled automated bot strategies, order tracking, and options executions integrated with the services. Binance advised users to inspect their open orders and positions directly, wait for SignalPlus to resolve the issue before creating new connections, and implement IP whitelisting. Binance founder Changpeng Zhao publicly recommended that traders revoke SignalPlus API credentials across all other exchange platforms.
Key facts
- API keys revoked
- Nov 5, 2026 incident
- Exchange systems unaffected
- Bot strategies halted
Read the original at channelnewsasia.com