---
title: "Binance, Deribit Revoke SignalPlus API Keys After Breach"
publication: "MediaBias News"
url: "https://mediabias.news/business/binance-deribit-revoke-signalplus-api-keys-after-breach"
api: "https://mediabias.news/api/v1/stories/binance-deribit-revoke-signalplus-api-keys-after-breach"
markdown: "https://mediabias.news/business/binance-deribit-revoke-signalplus-api-keys-after-breach.md"
audio: "https://mediabias.news/api/audio/binance-deribit-revoke-signalplus-api-keys-after-breach"
category: "Business & Economy"
published: "2026-11-05T19:47:13.160Z"
source_reported: "2026-11-05T19:02:19.724Z"
updated: "2026-11-05T19:47:13.160Z"
trust_score: 42
critic_score: 59
hype_score: 41
assessment_type: "coverage-and-source-reporting-analysis"
fact_check_status: "not-performed"
coverage_measured: "2026-11-05T22:04:26.612Z"
---

# Binance, Deribit Revoke SignalPlus API Keys After Breach

*Crypto exchanges cut access to trading platform SignalPlus following a security incident.*

**Scores for the source reporting** (0-100, assessing the original journalism this article was written from, not this write-up): 

- Trust 42 of 100, higher is better. One outlet provided a full report; 26 others provided digests, with no named sources or documents cited.
- Craft 59 of 100, higher is better. Most outlets provided digests, with limited detail. The full report offered quotes and specific details.
- Hype 41 of 100, lower is better. Headlines used terms like 'security scare' and 'threat' without strong evidence in the digests.

Scored by MediaBias News; method at https://mediabias.news/methodology.

**The short version**

- Binance and Deribit revoked API keys linked to SignalPlus after the platform reported a security issue.
- SignalPlus stated that attackers compromised an engineer's computer, resulting in losses of less than $82,000.
- The platform acknowledged it had not required IP whitelisting for exchange API access.
- Binance co-founder Yi He urged other platforms to review their security controls.

Crypto exchanges Binance and Deribit have revoked API keys connected to the trading platform SignalPlus. The action was taken after SignalPlus reported a potential security issue. Both exchanges stated that their own systems remained unaffected and that customer funds were safe.

SignalPlus reported that attackers gained access by compromising an engineer's computer. The platform stated that the incident resulted in losses of less than $82,000 and that it would reimburse affected users in full. SignalPlus also acknowledged that it had not implemented IP whitelisting for exchange API access, a measure that restricts API access to a predefined list of approved internet addresses. The company said it would strengthen internal security controls and tighten API access requirements.

The SignalPlus incident occurred days after Binance disclosed details of a $6.3 billion hack. Binance co-founder Yi He urged third-party platforms integrated with the exchange to review their security controls and monitor for suspicious activity, warning that the threat extended beyond any single company.

## Disagreement on details of the attack

Cointelegraph reported that the attack originated from a compromised Telegram account belonging to a contact at a third-party technology vendor, with the attacker impersonating the contact and sending a fake Microsoft Teams meeting invitation to a SignalPlus engineer. Crypto.news stated that the company reported a potential security issue, prompting founder Changpeng Zhao to warn traders using the service on other exchanges to take similar precautions. None of the other reports specified the exact method of compromise beyond a compromised engineer's computer.

## What the coverage left out

None of the centre or right-rated reports mentioned that SignalPlus stated attackers compromised an engineer's computer, resulting in losses of less than $82,000. They also did not include SignalPlus's acknowledgement that it had not required IP whitelisting for exchange API access.

## Who covered it

Shares of the 7 covering outlets with a published leaning rating:

- Left: 0% (0)
- Centre: 71% (5)
- Right: 29% (2)

25 of 32 covering outlets carried no usable leaning rating and were excluded from those percentages. Coverage measured 2026-11-05T22:04:26.612Z.

**Coverage watch:** developing. Checked 2 times; 0 checks found a material change. Most recently checked 2026-11-06T00:00:37.350Z.

## How the sides framed it

### Left

No separate framing summary.

### Centre

- The centre-rated reports led with the revocation of API keys by Binance and Deribit due to a security issue at SignalPlus. Cointelegraph, which provided a full report, detailed the attack's origin from a compromised Telegram account and a fake Teams invitation that led to an engineer's computer being compromised. It also noted SignalPlus's admission of not requiring IP whitelisting and the subsequent reimbursement of losses under $82,000. Crypto.news, in its digest, highlighted Binance's warning to traders on other exchanges to take similar precautions.

### Right

- The right-rated reports focused on the revocation of API keys by Binance and Deribit following a security alert. Independent Journal Review stated that Binance and Deribit revoked SignalPlus-connected API keys after the trading platform reported a potential security issue, with both exchanges confirming their systems were unaffected. Vz.ru reported that Binance withdrew API keys due to a security threat, reiterating that the exchange withdrew keys after a potential security problem was reported.

**Provisional coverage gap:** left. The watch is not closed, so this is not yet a settled blindspot finding.

## Factuality profile of the covering outlets

These are published factuality ratings of the outlets, not a verdict on whether this story or its claims are true.

- low: 1
- mixed: 2
- high: 3
- unknown: 25
- veryHigh: 1

## Verification scope

This page compares coverage and scores the source reporting. It is not a ClaimReview verdict on whether the underlying event or claim is true.

## Original reporting this was written from

- [The New York Ledger](https://thenyledger.com/markets/crypto/signalplus-security-breach-prompts-exchange-api-shutdowns) — SignalPlus Security Breach Prompts Exchange API Shutdowns
- [Cointelegraph](https://cointelegraph.com/news/binance-deribit-revoke-signalplus-api-fake-teams-attack) — SignalPlus Security Breach Prompts Exchange API Shutdowns
- [coinstats.app](https://coinstats.app/news/d018d1c011476e8402218182e7768e2d81d6c0eaf29ac600bfbdc00a9237d608_Binance-Deribit-revoke-SignalPlus-API-keys-after-fake-Teams-invite-attack) — Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack
- [Crypto Breaking News](https://cryptobreaking.com/binance-and-deribit-revoke-signalplus) — Binance and Deribit Revoke SignalPlus API Keys After Security Alert
- [CoinTribune](https://cointribune.com/crypto-binance-supprime-toutes-les-cles-api-liees-a-signalplus) — Crypto: Binance Removes All API Keys Related to SignalPlus
- [FinanceFeeds](https://financefeeds.com/binance-and-deribit-revoke-signalplus-api-keys-after-potential-security-issue) — Binance, Deribit Revoke SignalPlus API Keys: Are Funds Safe?
- [Criptoinforme](https://criptoinforme.com/intercambios/binance-signalplus-claves-api-revocadas) — Binance Deletes All API Keys Linked to SignalPlus Due to a Possible Security Problem
- [Altcoin Buzz](https://altcoinbuzz.io/binance-cuts-signalplus-api-keys-a-week-after-6-4b-hack) — Binance Cuts SignalPlus API Keys a Week After $6.4B Hack
- [Potosinoticias.com](https://potosinoticias.com/2026/11/05/binance-y-deribit-eliminan-claves-api-de-signalplus-por-posible-falla-de-seguridad) — Binance and Deribit Remove SignalPlus API Keys for Possible Security Failure
- [Independent Journal Review](https://ijr.com/discover/binance-deribit-revoke-signalplus-api-keys-8e59779e) — Binance and Deribit revoke SignalPlus API keys after security report
- [Protos](https://protos.com/binance-drops-signalplus-api-keys-after-potential-hack) — Binance drops SignalPlus API keys after potential hack
- [Crypto Economy](https://crypto-economy.com/es/binance-revoca-apis-signalplus) — Binance Revokes SignalPlus API Keys for a Possible Third-Party Security Breach - Crypto Economy ESP
- [Cryptopolitan](https://cryptopolitan.com/binance-cuts-off-signalplus-security-scare) — Binance cuts off SignalPlus as security scare hits $500M options platform for institutional traders
- [SpaceMoney](https://spacemoney.com.br/investimentos/criptomoedas/binance-revoga-chaves-api-signalplus) — Binance Revokes SignalPlus API Keys After Alert
- [Blockonomi](https://blockonomi.com/?p=218245) — Binance API Keys Tied to SignalPlus Revoked Over Security Issue
- [Coin Desk](https://coindesk.com/tech/2026/11/05/binance-cuts-signalplus-access-after-security-warning-urges-users-to-check-accounts) — Binance cuts SignalPlus access after security warning, urges users to check accounts
- [Bitcoin.com](https://news.bitcoin.com/security/binance-revokes-signalplus-api-access-days-after-6-34b-hack) — Binance Revokes Signalplus API Access Days After $6.34B Hack
- [Coinfomania](https://coinfomania.com/binance-removes-all-signalplus-api-keys-following-security) — Binance Removes All SignalPlus API Keys Following Security
- [BITRSS](https://bitrss.com/binance-revokes-api-keys-security-issue-found-at-signalplus-269133) — Binance Revokes API Keys, Security Issue Found at SignalPlus
- [Decrypt](https://decrypt.co/382599/binance-cuts-off-signalplus-api-keys-over-potential-security-issue-at-trading-platform) — Binance Cuts Off SignalPlus API Keys Over 'Potential Security Issue' at Trading Platform
- [Livecoins](https://livecoins.com.br/cofundadora-da-binance-alerta-sobre-falha-em-empresa-terceira-uma-semana-apos-ataque-hacker-desligamos-api-de-forma-preventiva) — Binance Co-Founder Alerts About Third-Party Failure a Week After Hacker Attack: "We Shut Down API Preventively"
- [DiarioBitcoin](https://diariobitcoin.com/exchanges/binance-revoca-las-claves-api-de-signalplus-por-un-posible-problema-de-seguridad) — Binance Revokes SignalPlus API Keys for a Possible Security Issue
- [u.today](https://u.today/binance-revokes-api-keys-security-issue-found-at-signalplus) — Binance Revokes API Keys, Security Issue Found at SignalPlus
- [Reuters](https://reuters.com/technology/binance-removes-all-signalplus-api-keys-after-security-issue-2026-11-05) — Binance, Deribit remove SignalPlus API keys after security issue
- [MyCryptoParadise](https://mycryptoparadise.com/report-says-binance-revoked-all-signalplus-api-keys) — Report says Binance revoked all SignalPlus API keys
- [crypto.news](https://crypto.news/binance-revokes-signalplus-api-keys-after-potential-security-issue) — Binance revokes SignalPlus API keys after potential security issue
- [vz.ru](https://vz.ru/news/2026/11/5/1472471.html) — "Binance Has Withdrawn "SignalPlus API"--Keys Due to a Security Threat.
- [The Defiant](https://thedefiant.io/news/security/binance-revokes-signalplus-api-keys-after-security-warning) — Binance Revokes SignalPlus API Keys After Security Warning
- [Crypto Briefing](https://cryptobriefing.com/binance-removes-signalplus-api-keys) — Binance removes API keys linked to SignalPlus after reported security issue
- [El Economista](https://eleconomista.com.mx/tecnologia/binance-deribit-retiran-claves-api-signalplus-problema-seguridad-20261105-842323.html) — Binance and Deribit Remove SignalPlus API Keys After a Security Issue
- [National Cyber Security](https://nationalcybersecurity.com/binance-plans-security-audit-report-after-reworking-access-controls-ai) — Binance Plans Security Audit Report After Reworking Access Controls #AI - National Cyber Security Consulting
- [TokenPost](https://tokenpost.com/news/technology/48951) — Binance Co-Founder 何一 Details Security and Permission Reviews

## Questions

**Why did Binance and Deribit revoke SignalPlus API keys?**

Binance and Deribit revoked API keys connected to SignalPlus after the platform reported a potential security issue. This action was taken as a precautionary measure to protect their systems and customer data.

**What was the extent of the losses from the SignalPlus security incident?**

SignalPlus stated that attackers compromised an engineer's computer, resulting in losses of less than $82,000. The platform pledged to reimburse affected users in full for any losses incurred due to the breach.

**Did SignalPlus have IP whitelisting enabled for API access?**

SignalPlus acknowledged that it had not required IP whitelisting for exchange API access. This is a security measure that restricts API access to a predefined list of approved internet addresses.

---

MediaBias News — https://mediabias.news. Reproduced from https://mediabias.news/business/binance-deribit-revoke-signalplus-api-keys-after-breach. Please cite as: MediaBias News, "Binance, Deribit Revoke SignalPlus API Keys After Breach", https://mediabias.news/business/binance-deribit-revoke-signalplus-api-keys-after-breach