Binance and Deribit have revoked the API keys connected to third-party cryptocurrency trading platform SignalPlus after the platform reported a potential security issue, with both exchanges cutting off the affected credentials as a precautionary measure.

Binance said it had proactively revoked all API keys linked to SignalPlus. The exchange emphasized that its own systems remain unaffected and that user funds are safe. The action was taken in direct response to the potential security concern reported by the trading platform.

Deribit has also removed the API keys associated with SignalPlus as a precaution. According to Wu Blockchain, the exchange found no indication that its systems or data had been affected by the reported issue.

Exchanges Advise Users to Review Trading Activity

Both Binance and Deribit advised users who may be affected to review their trading positions and open orders. The exchanges also recommended that users wait for SignalPlus to confirm that the security issue has been resolved before reconnecting their accounts.

The guidance is particularly relevant to users who rely on third-party trading platforms through API connections. API keys are credentials issued by exchanges that allow approved external applications to access a user's account — for example, to retrieve account data or place and manage orders — without the user sharing login credentials. These credentials remain active until they are revoked by the exchange or the user, which is why revocation is the immediate safeguard available to an exchange when a connected platform reports a potential exposure. This kind of API connectivity is a standard integration path between crypto exchanges and external trading tools.

These connections let services such as SignalPlus interact directly with exchange accounts, which makes the security of API access an important consideration whenever a potential vulnerability is reported. Revoking the linked API keys prevents those credentials from continuing to access the exchanges through the affected connection, and for affected users it means connected tools no longer have live access to their accounts until new credentials are issued and the connection restored. However, the reported actions do not establish that user accounts or exchange systems were compromised.

Precautionary Response From Both Exchanges

The reported concern originated with SignalPlus, which notified users or relevant parties of a potential security issue. Binance and Deribit responded by removing the associated API access while separately stating that they had found no impact on their respective systems or data.

Wu Blockchain reported the actions taken by the two exchanges. The information available so far does not specify the technical nature of the potential security issue, how it may have occurred, or how many users were affected. No timeline for restoring the connections was included in the reports, with users instead directed to await confirmation from SignalPlus before re-linking their accounts. That makes SignalPlus's own follow-up communication the main development to watch, along with any further detail from the platform or the exchanges on the nature and scope of the flagged concern.

For users connected to SignalPlus through Binance or Deribit, the immediate guidance from both exchanges remains the same: check open orders and trading positions, and hold off on restoring the API connection until SignalPlus confirms that the issue has been resolved.

Source: Hokanews