BTC $79.556,00 +1,66%ETH $2.385,46 +3,01%SOL $95,30 +2,75%S&P 500 7.688,62 +1,58%Nasdaq 100 28.437,20 +0,91%Gold $4.136,10 +1,55%Brent $96,64 +2,13%EUR/USD 1,1222 −0,12%DXY 101,61 +0,04%US10Y 4,91% +0,27%NVDA $200,13 −3,17%TSLA $385,19 −3,34%
FREEKONOMIST
CriptoAnunciado

Binance and Deribit remove all SignalPlus API keys: what traders should check

Crypto options platform SignalPlus reported a potential security issue. Binance and Deribit removed every API key linked to it.

Evento: 5 de novembro de 2026
Fonte primária: 5 de novembro de 2026
Publicado aqui: 5 de novembro de 2026 às 14:20 UTC
Ler: 2 min

O que aconteceu

On November 5 Binance removed all API keys linked to SignalPlus, a crypto options and derivatives trading platform, after SignalPlus reported a potential security issue. Deribit did the same.

Por que importa para você

An API key lets a service trade in your account without logging in. A stolen key can place trades even when withdrawals are off. Binance says its own systems are unaffected and funds are safe.

O que conferir e observar

We are waiting for SignalPlus to explain what happened. If you use it, check your positions and orders on the exchange directly. This is an overview, not financial advice.

Diagram: you create an API key, SignalPlus stores it and trades; Binance and Deribit removed all keys, CZ says revoke them yourself on other exchanges
How an API key works and where it was cut. Based on Binance, CZ and Reuters.
Five-step checklist: log in directly, review positions and orders, revoke SignalPlus keys, do not reconnect yet, new key with IP whitelist and no withdrawals
The first four steps come from Binance and CZ, the last is basic key hygiene.

Onde está acontecendo

LIVE

Arraste para girar. Pontos verdes: a bolsa está negociando agora (horário normal, sem contar feriados). Sombra: onde agora é noite. Fronteiras: Natural Earth, terremotos: USGS. Ideia das camadas: God’s Eye View (MIT).

Binance post on X

What happened. At 10:51 UTC on November 5, Binance said on X that it had "proactively removed all API keys linked to SignalPlus" as an immediate precaution. The trigger: SignalPlus itself reported a potential security issue. Reuters reports that Deribit also removed all SignalPlus keys and, after an investigation, found no sign its systems or data were affected.

What Binance says. The exchange's own systems are unaffected and user funds are safe. SignalPlus users should log in to Binance directly, review positions and open orders, and not reconnect keys until SignalPlus confirms the issue is fully resolved. For new keys, Binance recommends IP whitelisting.

What CZ and Yi He say. Binance founder Changpeng Zhao wrote: "If you use SignalPlus for any other exchange platform, it's time to revoke all your API keys." He advised against storing API keys with third parties at all. Binance co-founder Yi He urged all connected platforms to review their security and watch for suspicious activity.

Why it matters. An API key gives an outside service access to your account: to see balances and place orders. Even without withdrawal rights, someone else's hands on the key can mean bad trades. This comes a week after the $6.3 billion Binance hack on October 29, but it is a separate case: the exchange says its systems are fine. This is our view.

What we don't know. What exactly happened at SignalPlus. Whether any keys actually leaked. Whether users saw unauthorized trades or losses. When the service can be reconnected.

Fatos confirmados

  • On November 5, 2026 Binance removed all API keys linked to SignalPlus after SignalPlus reported a potential security issue.[1][3]
  • Binance said its systems were unaffected and user funds remain safe.[1][3]
  • Binance advised reviewing positions and orders directly, not reconnecting until SignalPlus confirms a fix, and enabling IP whitelisting.[1][4]
  • Deribit also removed all SignalPlus keys and found no sign its systems or data were affected.[3]
  • CZ urged users to revoke SignalPlus keys on every other exchange and not to store API keys with third parties.[2][4]

Implicações

  • ConfirmadoSignalPlus connections to Binance and Deribit no longer work for now.
  • Nossa leituraAnyone who linked SignalPlus to other exchanges is safer revoking those keys themselves. This is our view, based on CZ's advice.

Ainda não se sabe

  • What exactly happened at SignalPlus
  • Whether there were unauthorized trades or losses
  • When SignalPlus will say the issue is fixed

Quem é afetado

Global. Anyone who linked SignalPlus or another trading tool to an exchange with API keys

Fontes

  1. Binance: Binance on X: SignalPlus API keys removed 5 de novembro de 2026 · oficial
  2. Changpeng Zhao (X): CZ: revoke SignalPlus API keys on other exchanges 5 de novembro de 2026 · oficial
  3. Reuters via CNA: Binance, Deribit remove SignalPlus API keys after security issue 5 de novembro de 2026 · mídia
  4. CoinDesk: Binance cuts SignalPlus access after security warning, urges users to check accounts 5 de novembro de 2026 · mídia
Capa como imagem
Isso ficou mais claro?

Capa: Gráfico de Freekonomist, uma imagem simbólica, não uma foto do evento. Este é um explicador de notícia, não recomendação financeira.

Mais matérias

Morning brief by email

The night's key moves and what matters today, in 2 minutes. One-click unsubscribe.

By tapping Subscribe you agree to receive Freekonomist emails and accept the política de dados.

BloFinBloFinAnúncio · parceiro

Só pelo link de Arut · até 17 de novembro

De um bônus de $20 a um Rolex: uma campanha da BloFin só pelo nosso link

A BloFin criou esta campanha só para quem se cadastra pelo link de indicação de Arut, fundador do Freekonomist. Cada nível de volume em futuros libera um prêmio: de AirPods a um Rolex.

  • Bônus de futuros de $20 a partir de $1.000 de volume (novos usuários)
  • Rolex ($9.400) a partir de $250M
  • Cashback de 10% do depósito para os primeiros 100
  • Até 17 de novembro
  • Our trust rating: 41/100 ↗

Link de afiliado: se você se cadastrar, podemos receber uma comissão. Anúncios nunca afetam nosso ranking de corretoras nem as notícias. Futuros alavancados são de alto risco: você pode perder tudo o que investir, e correr atrás de volume por um prêmio aumenta taxas e risco. Só para maiores de 18. Bônus de depósito: manter o depósito por 4+ dias e passar de $50.000 de volume taker; um saque durante a campanha anula o prêmio. Condições completas

Participar na BloFin