Binance has revoked all API keys linked to third-party trading platform SignalPlus after the company flagged a potential security issue, prompting Binance CEO Changpeng Zhao to warn users to take immediate precautions across other exchanges. What happened - On Nov. 5, Binance disabled API connections associated with SignalPlus after the platform reported a possible breach. The exchange said the move was a precautionary step and that its internal systems were not impacted; customer funds were safe. - CZ urged anyone who had connected SignalPlus to any exchange to immediately revoke their API keys. “If you use SignalPlus for any other exchange platform, it’s time to revoke all your API keys,” he wrote on X, adding a broader warning against storing exchange API credentials with outside services. He also noted that derivatives exchange Deribit had earlier reported the issue. - Binance told affected users to log into their accounts directly to review open positions and outstanding orders, and recommended waiting until SignalPlus confirms the security issue is fully resolved before reconnecting. Why this matters - API keys let external apps interact with exchange accounts without constant logins; depending on permissions, they can read balances, place and cancel orders, and execute trades. That level of access makes compromised keys especially dangerous. - Binance advised enabling IP whitelisting on new API keys to limit which network addresses can use credentials, and co-founder Yi He urged third-party integration partners to tighten security, continuously monitor for unusual activity, and report concerns immediately. She stressed the guidance applies broadly to all third-party integrations, not only SignalPlus. Context: a turbulent month for Binance security - The SignalPlus alert comes amid fallout from a major attack on Binance on Oct. 29 that initially impacted roughly $6.34 billion in crypto. - In a Nov. 3 update, Binance said attackers used fake recruitment interviews, malware and compromised internal AI tools to access wallet infrastructure. They gained control of internal transaction-signing systems and executed unauthorized wallet operations across multiple blockchains. Part of the exploit used Ethereum’s EIP-7702 authorization to let a malicious smart contract act on behalf of a Binance hot wallet. - Binance rebuilt affected systems, replaced compromised devices and revoked credentials tied to targeted employees. About $2.85 billion of affected assets were frozen or intercepted through cooperation with blockchain investigators, law enforcement and industry partners. - By Nov. 4, Binance reported it had replenished roughly 98% of the impacted holdings, with purchases underway for some less-liquid tokens. Withdrawal services have been restored gradually after additional security checks, including reopening access for dozens of Ethereum and Solana tokens. Reporting note - crypto.news reached out to Binance for comment but had not received a response by publication time. Takeaway - If you use SignalPlus (or any third-party trading tool), revoke any exposed API keys now, inspect your exchange accounts directly, and adopt safeguards such as IP whitelisting and minimal permissions on API credentials until third-party security is verified. Read more AI-generated news on: https://app.chaingpt.org/news