Binance Issues Security Alert, Revokes SignalPlus API Keys Amid Withdrawal Recovery

Summary

• Binance revoked all SignalPlus API keys following a potential security issue, confirming its internal systems and customer funds remain secure.
• SignalPlus users must review trading positions and open orders, avoid reconnecting API keys, and enable IP whitelisting for additional protection.
• Binance announced phased withdrawal restorations for additional cryptocurrencies, prioritizing customer demand while maintaining security checks and keeping deposit services available.

Binance has revoked API keys linked to third-party trading platform SignalPlus following reports of a potential security vulnerability. According to Binance’s announcement, the exchange acted to protect connected accounts while confirming that customer funds remain secure.

Binance Removes SignalPlus API Keys Following Security Warning

The cryptocurrency exchange confirmed that it removed all SignalPlus API keys after receiving information about a possible security issue. Binance explained that the precautionary measure aimed to prevent potential unauthorized activity involving accounts connected to the external platform.

Importantly, the exchange clarified that the reported concern involved SignalPlus rather than its internal trading infrastructure. The company also reassured customers that its systems remained unaffected and that user funds were safe.

API keys allow external applications to execute trades, manage positions, and access authorized account functions without requiring repeated logins. Removing these connections prevents existing SignalPlus integrations from accessing customer accounts through previously authorized API keys.

Following a potential security issue reported by third-party platform SignalPlus, we have proactively removed all API keys linked to SignalPlus as an immediate precautionary measure.

Binance's own systems are unaffected. User funds remain safe.

If you used SignalPlus, please… pic.twitter.com/0HYYkTAW2p

— Binance (@binance) November 5, 2026

The exchange did not disclose the vulnerability’s nature or confirm whether unauthorized transactions had occurred. Following the security warning, Binance urged affected customers to access their exchange accounts directly and review existing trading positions.

Users were also encouraged to examine outstanding orders and avoid reconnecting SignalPlus until the provider confirms full resolution. Additionally, Binance recommended enabling IP whitelisting to restrict API access to approved addresses and strengthen account protection. The exchange extended its warning to other integrated platforms, urging providers to monitor unusual activity and report potential threats immediately.

Binance Announces Additional Withdrawal Restorations

Separately, Binance announced further progress in restoring cryptocurrency withdrawals following its recent security incident. According to its Recovery Update #8, withdrawals for additional assets were scheduled to resume from 04:00 UTC.

The exchange explained that services would reopen gradually as individual assets and networks completed security assessments. Binance prioritized assets based on customer demand while confirming that cryptocurrency deposit services remained available.

https://t.co/vDM2kw6QOe

— Binance (@binance) November 5, 2026

Meanwhile, customers were advised to monitor the exchange’s network status page for withdrawal availability and possible processing delays. The exchange confirmed that additional assets would become available as security checks progressed across supported networks. Binance maintains that its internal systems remain unaffected by the SignalPlus concern, with customer funds secure.