Skip to content
Binance and Deribit Revoke SignalPlus API Keys After Security Breach

Binance and Deribit Revoke SignalPlus API Keys After Security Breach

First seen 5 Nov 2026, 19:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 19:47 UTC
  • •API keys for SignalPlus were revoked by Binance and Deribit as a precaution after a security breach.
  • •The breach involved a compromised engineer's computer via a fake Teams invitation, leading to losses under $82,000.
  • •SignalPlus is enhancing security protocols, including implementing IP whitelisting for API access.

On November 5, 2026, Binance and Deribit revoked API keys linked to the crypto trading platform SignalPlus due to a security breach. SignalPlus reported that attackers compromised an engineer's computer through a fake Microsoft Teams invitation, resulting in losses of less than $82,000. Both exchanges confirmed that their systems remained unaffected, but trading and automation services through SignalPlus were halted. SignalPlus is reimbursing affected users and plans to enhance security measures, including implementing IP whitelisting for API access. The incident highlights vulnerabilities associated with third-party API connections in cryptocurrency trading. SignalPlus detected and contained the breach, but the full scope of the incident is still under investigation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 10h ago How this analysis works

Timeline

2026-11-05
API keys revoked by exchanges
Binance and Deribit revoked SignalPlus API keys due to a security breach affecting trading operations.
Cointelegraph
2026-11-05
SignalPlus reports security breach
SignalPlus disclosed that an engineer's computer was compromised, leading to financial losses.
Cointelegraph

More articles in this cluster (2)

Following this threat?

Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 4

Common questions

What caused the API key revocation?
The revocation was due to a security breach involving a compromised engineer's computer at SignalPlus.
How much was lost in the breach?
SignalPlus reported losses of less than $82,000 and is reimbursing affected users.
What security measures is SignalPlus implementing?
SignalPlus plans to enhance security by requiring IP whitelisting for API access and tightening internal controls.