Binance has revoked all application programming interface (API) keys connected to the third-party trading platform SignalPlus after SignalPlus reported a potential security issue on its own infrastructure. The exchange announced the move on Nov. 5 and described it as an immediate precautionary measure, saying its internal systems were unaffected and that user funds remained safe. The revocation severed the external connection through which SignalPlus users had linked their exchange accounts. Because each user creates and holds their own API credentials, the precautionary step covered every linked key across the integration's user base.

Binance did not disclose whether accounts connected through the integration experienced unauthorized trades, withdrawals, or losses, and it did not identify the number of affected accounts. The exchange also did not explain the nature of the vulnerability, name the affected component, or say when the SignalPlus connection might be restored.

Traders who used the integration have been told to log in to Binance directly and inspect their positions and open orders. The exchange advised waiting for SignalPlus to confirm a full resolution before reconnecting any credentials, and recommended IP whitelisting to restrict API access to approved internet addresses.

Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure. Binance's own systems are unaffected. User funds remain safe. If you used SignalPlus, please… pic.twitter.com/0HYYkTAW2p

— Binance (@binance) November 5, 2026

(Source: Binance on X)

Revoked Keys Cut Off SignalPlus Trading Access

The removal of the API keys cut off SignalPlus's access to Binance accounts through the revoked credentials. API keys let approved external software read account information or execute trades, with capabilities determined by the permissions each customer selects when creating them. Revoking the credentials therefore blocks the integration entirely, even where a trader had previously authorized trading access.

SignalPlus operates a crypto options dashboard offering pricing, analytics, and automated trading tools. Its Binance setup guide describes separate connections for trading and account data, and lets users select permissions covering spot and margin trading, futures, and options. The guide also instructs users to disable withdrawal permission — a setting that limits what connected software can do if its credentials are compromised. Because the dashboard relies on those API connections for its data and order execution, the revocation effectively disabled its trading functions for Binance users.

Users who held Binance API keys through the integration should treat the revoked connection as inactive. They should not rely on SignalPlus to display current exposure or order status. Binance's instruction to check the exchange directly places account verification inside Binance's own interface rather than the disconnected dashboard.

Binance Walks Users Through the Security Review

Binance told affected traders to open the exchange directly and review both their positions and their open orders. Such a check can reveal whether any orders remain active and whether current exposure matches expectations. From there, traders can cancel orders or adjust positions on Binance itself, without depending on the disconnected platform. Both checks can be completed without going through SignalPlus.

The exchange has not confirmed any unauthorized activity linked to SignalPlus, and it has not stated whether any customer suffered a loss. Those omissions leave the reported security issue unresolved in public disclosures. SignalPlus must confirm that its systems are secure before users consider reconnecting their Binance API keys.

API keys do not automatically carry every account privilege. When creating credentials, users can choose read-only, trading, or withdrawal permissions, and the narrower the permission set, the fewer actions an external service can perform. Binance's advice to disable withdrawals reflects that principle, although users still need to revoke unfamiliar credentials and review account activity whenever a security warning appears.

IP whitelisting offers an additional layer of protection by permitting API requests only from specified internet addresses. The control can reduce exposure when users connect an exchange account to external software, though it does not replace careful permission settings or direct account checks.

Broader Warning to Integrated Platforms

The incident also prompted Binance to address other platforms integrated with its exchange. The company urged them to review their security controls, monitor for unusual activity, and report concerns without delay. That broader warning underscores the risks created when traders grant outside services access to their exchange accounts. The episode also illustrates how exchange integrations concentrate dependence at the vendor layer, where a single third-party security report can set off an exchange-wide response that reaches every account linked through that vendor at the same time.

SignalPlus users should monitor account notifications and transaction records while the investigation continues, and confirm that no unfamiliar orders or permissions remain active. Binance has provided no timetable for a wider resolution, leaving users dependent on further updates from both companies.

Source: Blockonomi