Binance and Deribit cut SignalPlus API access
Key points
- Binance and Deribit have revoked SignalPlus-linked API keys following a security breach involving a compromised engineer's computer.
- SignalPlus reported losses below $82,000 and pledged full reimbursement to affected users.
- Both exchanges said their systems remained unaffected, while SignalPlus temporarily suspended services for security reviews.
Binance and Deribit have revoked all SignalPlus-linked API keys following a security breach targeting the trading platform.
Attackers reportedly compromised a SignalPlus engineer's computer through a fraudulent Microsoft Teams invitation.
Binance confirmed that its exchange infrastructure remained unaffected and all user funds remained secure.
API keys allow external applications to access exchange accounts and execute trades on users' behalf.
“We take responsibility for this oversight,” SignalPlus said, acknowledging it had not required IP whitelisting.
Deribit found no evidence that its systems or data were compromised after investigating the incident.
SignalPlus reported losses below $82,000, pledged full reimbursement and temporarily suspended services for security reviews.
The incident highlights security risks associated with connecting cryptocurrency exchange accounts to third-party trading platforms.
Frequently asked questions
More from Crypto
Samsung launches Solana-based USDC accounts in Wallet
Core Scientific targets Bitcoin mining exit as AI revenue grows
Ukraine's central bank challenges virtual asset bill
TeraWulf secures Google backing for $19 billion Anthropic deal
Amundi tokenises European equity index fund on Ethereum
Thai SEC files complaint over Bitget's unlicensed operations
