Binance Removes SignalPlus API Keys Following Reported Security Issue

Binance has taken proactive steps to secure user accounts by removing all API keys associated with the third-party trading tool SignalPlus. The exchange announced on Thursday that this decision follows a report from SignalPlus regarding a potential security issue. While the situation is being monitored, the exchange emphasized that its internal systems remain unaffected and all user funds are secure. This move is part of the latest Binance news as the platform navigates a period of heightened security scrutiny.

API keys are essential tools that allow external applications to connect directly to a user's exchange account, enabling automated trading strategies. By removing these keys, Binance has effectively severed the connection between its platform and SignalPlus. Consequently, any automated trading activities or strategies managed through the SignalPlus interface will be suspended until users generate and configure new API keys.

Binance Crypto Hack Context

The decision comes just one week after the exchange suffered a major security breach on October 29. During that incident, attackers drained approximately $6.4 billion from the exchange's hot wallets. The FBI has attributed the hack to a North Korean group known as TraderTraitor, though Pyongyang has denied these allegations. Binance reported that the breach occurred after an engineer was tricked by a fake recruiter into downloading malware, which allowed the attackers to access an internal wallet signing service.

In response to the recent theft, the exchange stated on Wednesday that it has already replenished about 98% of the lost assets using its own capital. It is currently working to recover the remaining balance, which consists primarily of less liquid tokens, through over-the-counter and market channels. Additionally, the exchange is in the process of restoring services and has begun reopening withdrawals for various assets in phases, prioritizing tokens based on recent user demand.

Binance has urged users who previously utilized SignalPlus to log into their accounts directly to monitor their open orders and current positions. The exchange recommended that users refrain from reconnecting to the platform until SignalPlus confirms that the underlying issue has been fully resolved. Furthermore, Binance advised all users to implement IP whitelisting, a security feature that restricts API key access to specific, pre-approved internet addresses.

Binance has removed SignalPlus API keys as a precautionary measure following a reported security vulnerability.

Why it matters

This incident highlights the ongoing security challenges facing the digital asset industry. By proactively cutting ties with a third-party tool, the exchange is attempting to prevent potential unauthorized access to user accounts. This serves as a reminder for traders to exercise caution when granting third-party applications access to their exchange credentials.

For users, including those in India and the broader South Asian market who utilize automated trading tools, the event underscores the importance of maintaining strict security hygiene. The exchange has called on all integrated third-party platforms to conduct thorough security reviews and report any suspicious activity immediately to ensure the safety of the broader ecosystem.