Original report published November 5, 2026, at 20:23:24 UTC+8.
Binance removed all API keys linked to third-party trading platform SignalPlus after the platform reported a “potential security issue,” according to the exchange’s November 5 statement cited by Decrypt.
Binance described the removal as an “immediate precautionary measure” and said its own systems were unaffected and user funds remained safe. The report did not specify the nature or scope of the potential issue.
What the cutoff means
API keys allow external applications to connect to exchange accounts and place trades on users’ behalf. Revoking SignalPlus-linked keys severs that connection, stopping automated strategies running through the platform on Binance until users establish new keys.
Binance urged affected users to access their exchange accounts directly and review their positions and open orders. It recommended waiting for SignalPlus to confirm that the issue was fully resolved before reconnecting, and enabling IP whitelisting to restrict API access to approved internet addresses.
The exchange also asked other integrated third-party platforms to review security controls, monitor unusual activity and report concerns immediately.
SignalPlus is a Hong Kong-based provider of crypto options and derivatives trading tools that connects to several exchanges, including Binance.
Separate hack and recovery context
Decrypt’s report placed the SignalPlus cutoff a week after an October 29 attack that it described as the largest hack in crypto history, with about $6.4 billion drained from Binance’s hot wallets. The report said the FBI attributed that theft to North Korean hackers it calls TraderTraitor, an allegation Pyongyang denied.
According to Binance’s account cited in the article, a fake recruiter persuaded an engineer to download a malware-laced coding assignment. Attackers then used stolen credentials to access an internal wallet-signing service.
On November 4, Binance said it had replenished about 98% of the stolen assets using its own funds. It was still purchasing the remainder, mostly less-liquid tokens, through market and over-the-counter channels.
The exchange also reported taking a proof-of-reserves snapshot covering 44 tokens, up from 10. It said users would be able to verify it after a zero-knowledge proof was generated, expected in about 50 to 60 hours.
As of November 5, Binance was reopening withdrawals for additional assets in phases, prioritizing tokens according to user demand over the preceding week. Deposits remained open.