Binance has removed every API key linked to SignalPlus after the Hong Kong-based options platform reported a potential security issue. The change cuts the connection between Binance accounts and SignalPlus, so any automated options or derivatives strategy running through the platform on Binance stopped working until users set up a fresh connection.
Binance called it an "immediate precautionary measure". "Binance's own systems are unaffected. User funds remain safe," the exchange said on 5 November. It did not say what the security issue was.
What Binance Told SignalPlus Users to Do
The exchange told SignalPlus users to log into Binance directly to review their positions and open orders. It recommended waiting until SignalPlus confirms the issue is fully resolved before reconnecting, and enabling IP whitelisting, which restricts an API key to approved internet addresses. Until users re-establish the link, nothing automated runs.
SignalPlus's own Binance setup guide describes separate connections for trading and for reading account data. It lets users pick permissions for spot, margin, futures and options, and tells them to disable withdrawal permission.
Why the Keys Went Now
The revocation lands a week after the October 29 attack in which attackers drained about $6.4 billion from Binance hot wallets.
Binance has said it replenished about 98% of the stolen assets from its own funds and is still buying the rest, mostly less liquid tokens, through market and over-the-counter channels. It has also taken a new proof-of-reserves snapshot covering 44 tokens, up from 10, which users can verify once a zero-knowledge proof is generated in about 50 to 60 hours.
The exchange also urged other third-party platforms integrated with it to review their security controls, monitor unusual activity and report concerns immediately.
What SignalPlus Is
SignalPlus is a Hong Kong-based fintech founded in 2021 that builds AI-enabled trading tools for digital assets: options pricing, analytics, automated market-making robots and execution algorithms. It connects to several exchanges, Binance among them. It has raised $73 million across several rounds, most recently a $50 million Series B in 2026, and holds ISO/IEC 27001 and SOC 2 certifications and an A+ rating in penetration testing.
What Is Still Unknown
Binance attributed the warning to SignalPlus but has not described the underlying issue or given a timetable for resolution. It did not disclose whether any accounts saw unauthorized trades, withdrawals or losses, or how many accounts were linked to SignalPlus. SignalPlus has not publicly explained the issue. So far there has been no significant market disruption or price impact tied to the revocation.
The next thing to watch is SignalPlus. Until it confirms the issue is resolved and Binance relinks the integration, the keys stay off.
