Finance1 min read

Binance, Deribit remove SignalPlus API keys after security issue

By · Published by Everything Blog

In short

Cryptocurrency exchanges took defensive action by purging all API keys tied to SignalPlus after the trading infrastructure firm reported an internal security issue. Binance confirmed its systems and user balances were completely unharmed, while Deribit reported that its own data and platforms showed no signs of compromise. In response, Binance founder Changpeng Zhao publicly recommended that traders manually revoke any active SignalPlus keys on alternative exchanges. The incident arrives after Binance managed $3.64 billion in user withdrawals following a prior breach tied by the FBI to North Korean hackers.

Key points

  • Trading platforms are rapidly cutting third-party connections to prevent outside security…: Trading platforms are rapidly cutting third-party connections to prevent outside security issues from affecting user accounts.
  • Traders utilizing SignalPlus on other exchanges should actively revoke their API credenti…: Traders utilizing SignalPlus on other exchanges should actively revoke their API credentials to prevent unauthorized access.
  • Binance previously absorbed substantial losses by covering 95 percent of the $6.3 billion…: Binance previously absorbed substantial losses by covering 95 percent of the $6.3 billion stolen during a prior cyberattack.

Sources checked by our analysis pipeline: 1

Binance, Deribit remove SignalPlus API keys after security issue

Nov 5 : Binance and Deribit said on Thursday they have removed all API keys linked to SignalPlus after the digital asset options and derivatives trading infrastructure platform reported a potential security issue.

Binance said its own systems were unaffected, adding that user funds remain safe.

Derivatives exchange Deribit said it found no indication its systems or data were affected after an investigation.

"If you use SignalPlus for any other exchange platform, it's time to revoke all your API keys," Binance founder Changpeng Zhao said in a post on X.

Last week, Binance customers pulled $3.64 billion, or 2.1 per cent of its assets, as the world's biggest cryptocurrency exchange went back online on Sunday after hackers the FBI links to North Korea stole billions from the platform. The exchange said it covered 95 per cent of the $6.3 billion of stolen assets.

Finance