Security ·
Binance cuts SignalPlus connections and asks users to check open orders
Binance removed API keys linked to SignalPlus on 5 November after the trading platform reported a potential security issue. The exchange told affected users to inspect their positions and open orders directly in their Binance accounts.
CoinDesk and Unchained report that Binance described the removal as a precaution and said its own systems were unaffected. Those are the exchange’s statements about this incident; they should not be read as an independent check of every connected customer account.
API keys allow external software to interact with an exchange account, including placing trades where permission has been granted. Revoking a connection prevents the tool continuing to use that key, but reviewing existing orders and positions remains a separate task.
Binance’s reported guidance is to wait until SignalPlus confirms full resolution before reconnecting keys and to enable IP whitelisting, which restricts access to approved internet addresses. This alert concerns third-party trading access, distinct from the earlier Binance infrastructure incident. It does not establish a new compromise of Binance itself or quantify customer losses.
Automation is convenient. Remembering which machines have permission to spend your money is the less glamorous half.
The receipts
Worth passing round?
Send the story to a friend, or take Bumpy’s verdict card with you.

Have a question about this?
Take this story into our Telegram community. Bring a source, a question or a well-placed eyebrow.
Opens the community invite. Paste the story link into the conversation; nothing is sent automatically.This is the 5 November 2026 edition. Facts may have developed since publication. Read the latest briefing →
