Binance removes API keys linked to SignalPlus after reported security issue

SignalPlus is a third-party options and trading-analytics platform that plugs into Binance via API keys, a common setup across the exchange's ecosystem of bots, dashboards and algorithmic tools. Binance routinely revokes keys when it detects anomalies at connected services, a defensive measure rather than an admission of its own fault. The episode lands a week after Binance itself disclosed a $6.4 billion hack blamed on North Korean actors, a backdrop that sharpens scrutiny of every security notice the exchange issues now.

SignalPlus users immediately lost automated trading access through the platform, since the revoked keys cut the bridge between SignalPlus and their Binance accounts. Binance told them to log in directly and manually verify open positions and pending orders rather than trust any third-party dashboard. Reconnection is on hold until Binance confirms the issue is fully resolved, meaning traders relying on SignalPlus for options strategies must manage positions manually or through other tools in the interim.

The incident tests how much a centralised exchange is willing to absorb responsibility for the security of tools built on top of it, even when the breach originates elsewhere. Binance's choice to act unilaterally, cutting access before SignalPlus itself fully explains what happened, protects users but also hands the exchange outsized control over which third-party services survive. That tension, between platform safety and ecosystem independence, resurfaces every time an API integration becomes the weak link rather than the exchange's own infrastructure.