Binance Revokes API Keys, Security Issue Found at SignalPlus
Binance has revoked all API keys associated with SignalPlus after the trading infrastructure provider identified a potential security vulnerability, the world's largest cryptocurrency exchange announced Thursday.
The exchange emphasized that its internal systems had not been compromised and that customer funds remained safe. The precise nature of the security issue remains unclear, with neither the extent of the potential vulnerability nor the number of users affected being publicly established.
Exchange Response
Following the potential security issue reported by SignalPlus, Binance proactively removed all API keys linked to the platform as an immediate precautionary measure. The exchange advised affected users to log into their Binance accounts directly to review positions and open orders.
We recommend waiting until SignalPlus confirms full resolution before rebinding any API keys, and always enabling IP whitelisting.
Third-Party Risks
The development highlights security challenges in cryptocurrency markets where trading platforms increasingly depend on external applications. SignalPlus provides trading infrastructure and analytical tools for cryptocurrency derivatives markets, allowing traders to manage positions through API integrations.
Binance has effectively severed existing integrations between its platform and SignalPlus, potentially disrupting automated trading strategies. The measure follows similar API-related vulnerabilities in 2022 when exposed credentials from trading platform 3Commas triggered security warnings across multiple exchanges.
Related
