Overview
- Binance removed API keys that connected users’ accounts to Hong Kong-based SignalPlus as a precaution after the trading tools firm reported a potential security problem.
- The revocation immediately stopped automated spot, futures, and options strategies run through SignalPlus on Binance and requires users to create new keys and reauthorize connections to resume trading.
- Binance said its systems and customer funds were not affected and advised users to review open positions and orders directly in their accounts before reconnecting third-party tools.
- Users are being urged to set granular permissions and enable IP whitelisting when reissuing API keys, and Binance executives warned traders to revoke SignalPlus keys on other exchanges too.
- The incident raises questions about SignalPlus’s security claims and recent fundraising progress and could prompt other exchanges to suspend integrations or seek a public incident report from the company.