API Keys Revoked: Why Binance Just Blocked SignalPlus Connections
Binance and Deribit have revoked all API keys linked to the third-party platform SignalPlus after it reported a potential security issue, halting trading and monitoring on both exchanges.
Binance removed all API keys linked to SignalPlus on Thursday as an immediate precautionary measure after the crypto options platform reported a potential security issue. The exchange stated that its own systems were unaffected and that user funds remain safe.
Deribit also revoked every customer API key connected to SignalPlus that day, saying the latter had informed it of a potential security concern. As a result, all trading, monitoring, and automation run through SignalPlus on Deribit have stopped, the exchange warned.
Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure. Binance’s own systems are unaffected. User funds remain safe.
Founder's Warning
Binance founder Changpeng Zhao (CZ) extended the warning to users of other exchanges integrated with SignalPlus. He urged them to revoke all API keys tied to the platform.
The SignalPlus alert comes a week after attackers took $6.3 billion from Binance’s hot wallets on October 29. The FBI has tied those attackers to North Korea’s TraderTraitor group.
If you use SignalPlus for any other exchange platform, it’s time to revoke all your API keys.
Third-Party Keys Have Leaked Before
An exchange API key lets outside software trade on an account without the user’s password. This access has made trading tools a target before.
Users of one such tool, 3Commas, reported unauthorized trades on FTX and Binance accounts in late 2022. Its CEO, Yuriy Sorokin, first disputed that the tool was at fault. Sorokin then admitted in December 2022 that the leaked customer API keys came from 3Commas.
Related
