Binance Kills SignalPlus-Linked API Keys After Security Scare

Binance just ripped the plug on every API key tied to SignalPlus. The exchange pulled the keys after a reported security issue, according to CoinDesk, and it isn't waiting around for the details to get sorted before locking things down.

Affected users got a blunt set of instructions: log into Binance directly, not through any third-party connection, and go over their positions by hand. Binance also told them to hold off on rebinding anything until SignalPlus confirms the problem is fully resolved. No timeline was given for when that confirmation might come.

API keys are the plumbing that lets trading tools, bots and portfolio apps talk to an exchange account without a password. When a partner platform is compromised, those keys are the door someone could walk through. Revoking them is the fast, blunt fix — it may cut off legitimate automation, but it slams the door.

Neither side has said what the security issue actually was, how many users are caught up in it, or whether any funds moved. Binance's own advice — check your positions yourself — signals users shouldn't assume their accounts look the way they left them.

For now the ball is in SignalPlus's court. Traders waiting to reconnect their setups are stuck refreshing until the platform gives the all-clear, and Binance has made clear it won't turn the keys back on before then.