Binance has revoked API keys linked to trading tool SignalPlus and says its own systems were not compromised in the process. The move affects users who connected their Binance accounts to SignalPlus using API credentials, the standard method third-party tools use to interact with an exchange on a user’s behalf.
What Binance revoked and why it matters
API keys are like a password you give to a third-party app. They let services such as trading bots, portfolio trackers, or tools like SignalPlus place orders or read account data without needing your full login credentials. When an exchange revokes those keys, the connection between your account and the third-party tool stops working immediately. For related coverage, see Crypto Novembers: FTX, Binance, Trump and Bitcoin's Run.
Binance confirmed it revoked API keys specifically associated with SignalPlus connections. The exchange stated that its own internal systems were unaffected by whatever prompted the revocation. That distinction matters: a revocation can be a precautionary measure, not necessarily a sign that Binance itself was breached. For historical context on how Binance handles security events, see how the exchange responded when the FBI named North Korea in a prior hack investigation.
This kind of action is not unprecedented for large exchanges. Binance has previously taken protective steps around third-party integrations when potential risks to user accounts were identified, as seen in its warnings about fake priority-access and recovery scams that targeted users through unofficial channels.
Binance says its systems were not affected
Binance’s statement draws a clear line between what happened at the third-party level and what happened on Binance’s own platform. The exchange says its core systems, the infrastructure that holds user funds and processes trades, were not affected.
This is an important distinction for anyone who holds funds on Binance. A statement that internal systems are unaffected means Binance is not reporting a breach of its own infrastructure. However, the company’s statement does not extend to any conclusions about what may have occurred on the SignalPlus side, or whether user data passed through that integration was involved.
Users should treat these as two separate questions: whether Binance was compromised (the exchange says no) and whether the SignalPlus connection itself posed a risk (that remains a separate matter to monitor). For comparison, see how Arkea communicated that customer holdings were unaffected after its own security event, a pattern Binance’s statement closely follows.
What users with SignalPlus connections should do now
If you connected your Binance account to SignalPlus at any point, the revocation means that connection no longer works. The API key Binance issued for that integration has been disabled, so SignalPlus can no longer act on your Binance account.
The practical steps are straightforward. Log into your Binance account and navigate to the API management section. Check which API keys are still active and which have been revoked. Remove any keys you no longer use or did not create yourself. This is good credential hygiene regardless of the current situation.
Do not recreate API keys for any third-party service until Binance has issued clear guidance about whether and how those connections can be safely re-established. Creating a new key before understanding what triggered the revocation could reintroduce the same exposure.
Binance has dealt with third-party security concerns before. Following the reported hack that led Binance to pause and then reopen Bitcoin withdrawals, the exchange demonstrated it would take precautionary steps across connected services when it identified risks. The same logic applies here: revocation is a protective action, not an admission that funds were taken.
The key takeaway for regular Binance users: if you used SignalPlus, check your API key settings now. If you did not use SignalPlus, this revocation does not affect you directly, but it is a good prompt to audit all active API connections on your account and remove anything you no longer use or recognize.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always conduct your own research before making decisions.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
