Binance and Deribit Revoke SignalPlus API Keys After Security Breach
Binance and Deribit have revoked all customer API keys linked to SignalPlus following a cyberattack on the crypto trading platform.
The attack reportedly began with a compromised Telegram account belonging to a third-party vendor. The attacker impersonated the contact and sent a fake Microsoft Teams invitation to a SignalPlus engineer, eventually gaining access to the platform’s internal network.
A small number of user accounts without IP whitelisting were affected, with total losses reported at under $82,000. SignalPlus says it has started reimbursing affected users.
Both exchanges confirmed their own systems and user funds remain unaffected. CZ has also urged anyone using SignalPlus on other exchanges to revoke their linked API keys immediately.
SignalPlus has suspended its services for a security review and plans to restore them in phases over the coming days.
Binance and Deribit have revoked all customer API keys linked to SignalPlus following a cyberattack on the crypto trading platform.
The attack reportedly began with a compromised Telegram account belonging to a third-party vendor. The attacker impersonated the contact and sent a fake Microsoft Teams invitation to a SignalPlus engineer, eventually gaining access to the platform’s internal network.
A small number of user accounts without IP whitelisting were affected, with total losses reported at under $82,000. SignalPlus says it has started reimbursing affected users.
Both exchanges confirmed their own systems and user funds remain unaffected. CZ has also urged anyone using SignalPlus on other exchanges to revoke their linked API keys immediately.
SignalPlus has suspended its services for a security review and plans to restore them in phases over the coming days.
