Why did Binance disconnect SignalPlus?
Binance has officially revoked all API connections to the third-party trading platform SignalPlus following reports of a potential security issue originating within the external service. While Binance stated that its internal systems and user funds were not compromised by this incident, the exchange chose to terminate these connections as a precautionary measure to safeguard its clients. The move effectively forces users who have previously linked their accounts to SignalPlus to immediately review their API settings and remove any existing keys associated with the platform.
What are the risks to crypto traders?
API keys act as digital bridges allowing third-party tools to execute trades or pull data from an exchange account, but they also represent a significant attack vector if the third-party provider is compromised. When a service like SignalPlus experiences a security flaw, the keys held by that platform could theoretically be exploited by malicious actors to gain unauthorized access to a trader's account. Changpeng Zhao, the former CEO of Binance, publicly advised traders to proactively audit and pull any API keys linked to the platform to prevent potential unauthorized transactions.
Binance confirmed that its own infrastructure remains unaffected by the vulnerability, emphasizing that the decision to sever ties was a proactive step to protect the wider ecosystem of traders who may have integrated their exchange accounts with the external service.
Does this incident follow other exchange vulnerabilities?
The disconnection of SignalPlus occurs during a sensitive period for the cryptocurrency industry, coming only days after reports of a massive $6.4 billion hack—a figure also cited as $6.34 billion by some sources—that has been attributed to North Korean threat actors. While the issues are separate, the timing has heightened anxiety among institutional and retail investors regarding the security of third-party integrations. Other major trading platforms, such as Deribit, have similarly moved to remove SignalPlus API keys to mitigate exposure to the reported vulnerability.
What should users do now?
Traders who have utilized SignalPlus are strongly encouraged to log into their Binance and other exchange accounts to manually delete any active API keys associated with the platform. Security experts often stress that users should only grant API permissions to platforms they explicitly trust and should limit the scope of these keys, such as restricting them to trading-only access rather than withdrawal permissions. By revoking these keys, users close the link between their exchange wallet and the potentially compromised third-party service, effectively neutralizing any lingering threat posed by the security gap.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $79,596 | +1.70% | $1600.3B |
 Ethereum ETH | $2,387 | +3.08% | $291.7B |
 BNB BNB | $710.46 | +1.57% | $93.4B |
 XRP XRP | $1.31 | +2.23% | $82.8B |
 Solana SOL | $95.38 | +2.94% | $56.3B |
 Dogecoin DOGE | $0.0759 | +1.66% | $11.9B |
 Cardano ADA | $0.196 | +3.01% | $7.3B |
Live data: CoinGecko — 2026-11-05 13:22 UTC
