Skip to the story
All stories

Binance, Deribit Revoke SignalPlus API Keys After Breach

Crypto exchanges cut access to trading platform SignalPlus following a security incident.

AI-assisted coverage comparison, editor-supervised · How this was made

Published
Binance, Deribit Revoke SignalPlus API Keys After Breach

What this story says

  • Binance and Deribit revoked API keys linked to SignalPlus after the platform reported a security issue.
  • SignalPlus stated that attackers compromised an engineer's computer, resulting in losses of less than $82,000.
  • The platform acknowledged it had not required IP whitelisting for exchange API access.
  • Binance co-founder Yi He urged other platforms to review their security controls.

Who covered it

Left 0%(0)Centre 71%(5)Right 29%(2)

Percentages are shares of the 7 outlets carrying a published leaning rating. 25 of the 32 outlets we know ran this story carry no rating and are not counted in them. Coverage measured .

Trust

42/100

Craft

59/100

Hype

41/100

32 sources · methodology

Thin on the left so far

None of the 7 outlets with a published leaning rating that ran this story are rated left.

This story is still being watched, so it is a count and not yet a finding. Coverage keeps arriving for hours after an event, and a side that has published nothing this morning may publish by tonight. If it is still true when we stop checking, we will say so plainly.

Crypto exchanges Binance and Deribit have revoked API keys connected to the trading platform SignalPlus. The action was taken after SignalPlus reported a potential security issue. Both exchanges stated that their own systems remained unaffected and that customer funds were safe.

SignalPlus reported that attackers gained access by compromising an engineer's computer. The platform stated that the incident resulted in losses of less than $82,000 and that it would reimburse affected users in full. SignalPlus also acknowledged that it had not implemented IP whitelisting for exchange API access, a measure that restricts API access to a predefined list of approved internet addresses. The company said it would strengthen internal security controls and tighten API access requirements.

The SignalPlus incident occurred days after Binance disclosed details of a $6.3 billion hack. Binance co-founder Yi He urged third-party platforms integrated with the exchange to review their security controls and monitor for suspicious activity, warning that the threat extended beyond any single company.

Disagreement on details of the attack

Cointelegraph reported that the attack originated from a compromised Telegram account belonging to a contact at a third-party technology vendor, with the attacker impersonating the contact and sending a fake Microsoft Teams meeting invitation to a SignalPlus engineer. Crypto.news stated that the company reported a potential security issue, prompting founder Changpeng Zhao to warn traders using the service on other exchanges to take similar precautions. None of the other reports specified the exact method of compromise beyond a compromised engineer's computer.

What the coverage left out

None of the centre or right-rated reports mentioned that SignalPlus stated attackers compromised an engineer's computer, resulting in losses of less than $82,000. They also did not include SignalPlus's acknowledgement that it had not required IP whitelisting for exchange API access.

Still developing. We have re-checked which outlets are covering this 2 times, most recently on 6 Nov 2026, 00:00, and will add the sides that appear.

How each side covered it

Our own reading of the reporting listed below, written from the outlets’ articles rather than quoted from them. The reasoning is set out on our methodology page.

Left

0 rated outlets

No outlet rated left has run this story so far. We are still checking, and will say plainly if that does not change.

Centre

5 rated outlets

  • The centre-rated reports led with the revocation of API keys by Binance and Deribit due to a security issue at SignalPlus. Cointelegraph, which provided a full report, detailed the attack's origin from a compromised Telegram account and a fake Teams invitation that led to an engineer's computer being compromised. It also noted SignalPlus's admission of not requiring IP whitelisting and the subsequent reimbursement of losses under $82,000. Crypto.news, in its digest, highlighted Binance's warning to traders on other exchanges to take similar precautions.

Right

2 rated outlets

  • The right-rated reports focused on the revocation of API keys by Binance and Deribit following a security alert. Independent Journal Review stated that Binance and Deribit revoked SignalPlus-connected API keys after the trading platform reported a potential security issue, with both exchanges confirming their systems were unaffected. Vz.ru reported that Binance withdrew API keys due to a security threat, reiterating that the exchange withdrew keys after a potential security problem was reported.

Questions about this coverage

How did the left and right cover Binance, Deribit Revoke SignalPlus API Keys After Breach?
Of the 7 outlets on this story carrying a published leaning rating, 0% are rated left, 71% are rated centre, 29% are rated right. Those percentages are shares of the rated outlets, not of every outlet that ran it, which was 32. The sections above set out what each side emphasised, in its own terms.
Is Binance, Deribit Revoke SignalPlus API Keys After Breach left or right?
Too few of the outlets on this story carry a published leaning rating to say. 7 of them do, and this site does not characterise a field under 12: at that size one newsroom filing moves the share by ten points. The percentages above are the count as it stands.
Is the coverage of Binance, Deribit Revoke SignalPlus API Keys After Breach biased?
Binance, Deribit Revoke SignalPlus API Keys After Breach is one event reported by 32 outlets, and this page does not rate the story as biased or unbiased. What it publishes is the spread: which outlets ran it, where named rating organisations place each of them on the spectrum, and what each side chose to lead with. A leaning rating describes an outlet's record over time, not this article, and the two should not be run together.
Which side is not reporting Binance, Deribit Revoke SignalPlus API Keys After Breach?
When we first saw this story, outlets rated left had barely covered it. Coverage accretes for hours after an event, so that is where to look rather than a verdict — the split above is the current count, and it is the one to read.
Which outlets covered Binance, Deribit Revoke SignalPlus API Keys After Breach?
32 that we know of, every one of them listed further up this page with a link to its own report and to what we hold on the publisher. Nothing here is a summary of somebody else's summary: the outlets are named so the original reporting can be read.
Why did Binance and Deribit revoke SignalPlus API keys?
Binance and Deribit revoked API keys connected to SignalPlus after the platform reported a potential security issue. This action was taken as a precautionary measure to protect their systems and customer data.
What was the extent of the losses from the SignalPlus security incident?
SignalPlus stated that attackers compromised an engineer's computer, resulting in losses of less than $82,000. The platform pledged to reimburse affected users in full for any losses incurred due to the breach.
Did SignalPlus have IP whitelisting enabled for API access?
SignalPlus acknowledged that it had not required IP whitelisting for exchange API access. This is a security measure that restricts API access to a predefined list of approved internet addresses.

Read it at the source

32 outlets, grouped by the leaning a published rating gives them. Every headline links to the original; an underlined outlet name opens our profile of that publisher.

Left

0

No outlet in this group ran the story.

Centre

5

Right

2

Not rated

25
Show 17 more

How did this read?

About the coverage, not about the story. We do not ask whether you agree with what happened — we have no honest use for that answer.

Binance, Deribit and SignalPlus | MediaBias News