Binance and Deribit remove all SignalPlus API keys: what traders should check
Crypto options platform SignalPlus reported a potential security issue. Binance and Deribit removed every API key linked to it.
Event: November 5, 2026
Primary source: November 5, 2026
Published here: November 5, 2026 at 02:20 PM UTC
Read: 2 min
What happened
On November 5 Binance removed all API keys linked to SignalPlus, a crypto options and derivatives trading platform, after SignalPlus reported a potential security issue. Deribit did the same.
Why it matters to you
An API key lets a service trade in your account without logging in. A stolen key can place trades even when withdrawals are off. Binance says its own systems are unaffected and funds are safe.
What to check and watch
We are waiting for SignalPlus to explain what happened. If you use it, check your positions and orders on the exchange directly. This is an overview, not financial advice.
Where it’s happening
LIVEDrag to spin. Green dots: the exchange is trading right now (regular hours, holidays not counted). Shadow: where it is night now. Borders: Natural Earth, quakes: USGS. Layer idea: God’s Eye View (MIT).
What happened. At 10:51 UTC on November 5, Binance said on X that it had "proactively removed all API keys linked to SignalPlus" as an immediate precaution. The trigger: SignalPlus itself reported a potential security issue. Reuters reports that Deribit also removed all SignalPlus keys and, after an investigation, found no sign its systems or data were affected.
What Binance says. The exchange's own systems are unaffected and user funds are safe. SignalPlus users should log in to Binance directly, review positions and open orders, and not reconnect keys until SignalPlus confirms the issue is fully resolved. For new keys, Binance recommends IP whitelisting.
What CZ and Yi He say. Binance founder Changpeng Zhao wrote: "If you use SignalPlus for any other exchange platform, it's time to revoke all your API keys." He advised against storing API keys with third parties at all. Binance co-founder Yi He urged all connected platforms to review their security and watch for suspicious activity.
Why it matters. An API key gives an outside service access to your account: to see balances and place orders. Even without withdrawal rights, someone else's hands on the key can mean bad trades. This comes a week after the $6.3 billion Binance hack on October 29, but it is a separate case: the exchange says its systems are fine. This is our view.
What we don't know. What exactly happened at SignalPlus. Whether any keys actually leaked. Whether users saw unauthorized trades or losses. When the service can be reconnected.
Confirmed facts
- On November 5, 2026 Binance removed all API keys linked to SignalPlus after SignalPlus reported a potential security issue.[1][3]
- Binance said its systems were unaffected and user funds remain safe.[1][3]
- Binance advised reviewing positions and orders directly, not reconnecting until SignalPlus confirms a fix, and enabling IP whitelisting.[1][4]
- Deribit also removed all SignalPlus keys and found no sign its systems or data were affected.[3]
- CZ urged users to revoke SignalPlus keys on every other exchange and not to store API keys with third parties.[2][4]
Implications
- ConfirmedSignalPlus connections to Binance and Deribit no longer work for now.
- Our readingAnyone who linked SignalPlus to other exchanges is safer revoking those keys themselves. This is our view, based on CZ's advice.
Still unknown
- What exactly happened at SignalPlus
- Whether there were unauthorized trades or losses
- When SignalPlus will say the issue is fixed
Who it affects
Global. Anyone who linked SignalPlus or another trading tool to an exchange with API keys
Sources
- Binance: Binance on X: SignalPlus API keys removed November 5, 2026 · official
- Changpeng Zhao (X): CZ: revoke SignalPlus API keys on other exchanges November 5, 2026 · official
- Reuters via CNA: Binance, Deribit remove SignalPlus API keys after security issue November 5, 2026 · media
- CoinDesk: Binance cuts SignalPlus access after security warning, urges users to check accounts November 5, 2026 · media
Cover: Freekonomist graphic, a symbolic image, not a photo of the event. This is a news explainer, not financial advice.
More stories
Czech National Bank raises its rate to 4%, second hike this year
The Czech National Bank raised its main rate by 0.25 point to 4% on November 5. The new rates apply from November 6.
Malaysia keeps its OPR rate at 2.75% but warns about inflation
Malaysia's central bank held its policy rate at 2.75% on November 5 but said inflation is likely to edge higher in 2027.
The Bank of England raises rates to 4%, vote 8–1
On 5 November the Bank of England raised its Bank Rate by 0.25 point to 4%. It was 3.75% before. The vote was 8–1. 1 members wanted a 0.5 point hike. Markets expected exactly this.
Morning brief by email
The night's key moves and what matters today, in 2 minutes. One-click unsubscribe.
BloFin
3M
7M
40M
60M
80M
250M