Cryptocurrency exchanges Binance and Deribit have terminated API connectivity with the trading platform SignalPlus following a reported security vulnerability. Both exchanges confirmed that their proprietary systems and user funds remain safe. Users are advised to revoke existing API keys to prevent unauthorized access to their accounts.
On November 5, 2026, cryptocurrency exchanges Binance and Deribit initiated an emergency shutdown of all API (Application Programming Interface) connections linked to the trading platform SignalPlus. This action follows a public disclosure by SignalPlus regarding a potential vulnerability within its infrastructure.
API keys act as digital bridges that allow third-party tools, such as SignalPlus, to execute trades or view data on behalf of a user on a main exchange like Binance or Deribit. By severing these connections, the exchanges aim to eliminate any path that could allow unauthorized individuals to access user accounts through the third-party provider's compromised system.
Both exchanges have proactively communicated that their internal architectural integrity remains intact. They emphasized that the decision to cut ties is a precautionary measure to safeguard the perimeter of their platforms and ensure that customer balances are not exposed to external risks. Deribit, in particular, conducted a thorough review of its transaction logs and data, confirming no evidence of unauthorized activity on its systems.
This incident highlights a recurring challenge for digital asset users regarding the safety of third-party middleware. While such tools offer automated trading or analytical benefits, they effectively function as an extension of the user’s account. If the third-party provider suffers a breach, the connection itself can become a vector for unauthorized access, regardless of the security strength of the primary exchange.
Following the announcement, Binance leadership urged all users who have connected their accounts to SignalPlus to immediately revoke their API credentials via the exchange’s security settings. Users are also encouraged to review their account permissions and monitor for any unrecognized trading activity. While this event does not impact the Indian stock market directly, it serves as a critical reminder for digital asset investors in India to periodically audit the permissions granted to third-party applications and to practice caution when connecting exchange accounts to external tools.