Binance Removes SignalPlus API Keys After Security Report

Binance removed all API keys linked to SignalPlus on November 5 after the trading platform reported a potential security issue, saying its own systems and customer funds were unaffected. Deribit also removed SignalPlus-linked keys and said an investigation found no indication its systems or data had been affected. The precaution disabled connections between Binance accounts and SignalPlus, a trading tools provider. Those API keys allow users to run automated trading strategies through the service while keeping assets on the exchange. The revocation stopped strategies using SignalPlus on Binance until users establish new connections. Binance advised users to check their positions and open orders directly through their exchange accounts, and to wait for SignalPlus to confirm the issue was resolved before reconnecting. It also recommended IP whitelisting, which restricts API access to approved internet addresses, and urged integrated third-party platforms to review security controls and monitor for unusual activity. SignalPlus said attackers stole less than $82,000 in user funds. In its account, the company said the incident began after attackers compromised a Telegram account...