SignalPlus users lost automated trading links to Binance and Deribit after both exchanges disabled API connections; SignalPlus estimated losses at less than $82,000.
Binance said the revocation was precautionary and that neither its systems nor customer funds were affected. It advised users to review positions and open orders directly on Binance, and to wait for SignalPlus to confirm the issue is resolved before reconnecting. Deribit reported no impact to its systems or data and said trading, monitoring and automation through SignalPlus had stopped on its platform.
SignalPlus said the incident began on Nov. 4. The company traced the breach to a vendor contact’s compromised Telegram account. It said a forged Microsoft Teams invitation reached one of its engineers, and the employee’s computer later provided a path into SignalPlus’ internal network.
SignalPlus put total losses below $82,000 and pledged to reimburse affected users in full. It said terminal services were paused during a security review, with a phased restart expected in the coming days. The company did not give a specific restoration date.
SignalPlus said it had not required IP whitelisting for exchange API keys and would strengthen its controls. Binance founder Changpeng Zhao urged users who connect SignalPlus to other exchanges to revoke those API keys as well.
