Binance and Deribit revoked all API keys linked to trading platform SignalPlus on Nov. 5, 2026, after the platform reported a potential security issue. Binance said its systems and user funds were unaffected, while Deribit said SignalPlus-linked trading, monitoring and automation had stopped. Users were told to review positions, open orders, permissions and transaction records directly on the exchanges and wait for SignalPlus to confirm full resolution before reconnecting. Binance recommended IP whitelisting and tighter API controls, and urged all integrated third-party platforms to review security measures and monitor for unusual activity. SignalPlus, formed in 2021, provides options-trading dashboards for Deribit, Binance, Bybit, OKX and Coincall. The incident followed Binance's Oct. 29 hot-wallet breach, in which attackers reportedly stole about $6.3 billion; the FBI linked the attackers to North Korea's TraderTraitor group. Earlier API-key incidents, including the 2022 3Commas compromise, have exposed the risks of granting third-party software trading access.