Binance and Deribit remove SignalPlus API keys after potential security issue
Binance and Deribit removed all API keys linked to trading platform SignalPlus on 5 November after it reported a potential security issue. Both say their own systems were not affected; the nature of SignalPlus's problem has not been disclosed.
1 / 2
The story, neutrally told
Mixed · 2Binance and Deribit said on Thursday 5 November that they had removed all API keys linked to SignalPlus, a digital asset options and derivatives trading infrastructure platform, after it reported a potential security issue. CNAN “Binance and Deribit said on Thursday they have removed all API keys linked to SignalPlus” Read at CNA ↗ IJRRC “Binance and Deribit removed all API keys linked to SignalPlus after the crypto trading platform reported a potential security issue.” Read at IJR ↗ Mixed · 2Binance said its own systems were unaffected and that user funds remain safe. CNAN “Binance said its own systems were unaffected, adding that user funds remain safe.” Read at CNA ↗ IJRRC “Binance said its systems were unaffected and user funds remained safe” Read at IJR ↗ Centre · 1Deribit, a derivatives exchange, said that after an investigation it found no indication its systems or data were affected. CNAN “Deribit said it found no indication its systems or data were affected after an investigation.” Read at CNA ↗
Centre · 1Binance founder Changpeng Zhao posted on X that anyone using SignalPlus on another exchange should revoke all their API keys. CNAN “"If you use SignalPlus for any other exchange platform, it's time to revoke all your API keys," Binance founder Changpeng Zhao said in a post on X.” Read at CNA ↗ Right · 1IJR reports that users were advised to check their accounts and open orders, revoke SignalPlus keys on other exchanges, and wait for the issue to be resolved before reconnecting, and that Binance also recommended limiting API permissions and using IP whitelisting. IJRRC “Users were advised to check their accounts and open orders, revoke SignalPlus keys on other exchanges, and wait for the issue to be resolved before reconnecting”“Binance also recommended limiting API permissions and using IP whitelisting.” Read at IJR ↗ Right · 1The nature and scope of SignalPlus's issue have not been disclosed, and no customer losses have been confirmed. IJRRC “the nature and scope of SignalPlus’s issue have not been disclosed, and no customer losses have been confirmed” Read at IJR ↗
Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.
Left0 outlets
No left outlet in our sources has covered this story yet.
Centre1 outlet
- Framing
- Short agency-style business report leading with the two exchanges' removal of keys and their reassurances, plus Changpeng Zhao's advice to revoke keys.
- Emphasis
- Exchange statements that their systems are safe; Zhao's post on X.
- Leaves out or plays down
- Does not say that the nature of SignalPlus's issue is undisclosed or that no losses are confirmed; gives no user guidance beyond Zhao's post.
Right1 outlet
- Framing
- Brief explainer that stresses uncertainty and practical steps for users.
- Emphasis
- What is not known (nature and scope of the issue, no confirmed losses) and precautions such as checking open orders, limiting API permissions and IP whitelisting.
- Leaves out or plays down
- Does not mention Zhao's X post.
What every side reports
- Binance and Deribit removed all API keys linked to SignalPlus on 5 November.
- SignalPlus reported a potential security issue.
- Binance said its systems were unaffected and user funds remain safe.
- Deribit found no indication its systems or data were affected.
Binance organisation
Says its own systems were unaffected and user funds are safe; removed SignalPlus keys, and its founder urged users to revoke keys elsewhere.
“Binance said its own systems were unaffected, adding that user funds remain safe.” — CNA
“Binance also recommended limiting API permissions and using IP whitelisting.” — IJR
Deribit organisation
Says an investigation found no indication its systems or data were affected.
“Deribit said it found no indication its systems or data were affected after an investigation.” — CNA
SignalPlus organisation
Reported a potential security issue; details of its nature and scope have not been disclosed.
“the nature and scope of SignalPlus’s issue have not been disclosed” — IJR
Left0 articles
No coverage yet.
Centre1 article
-
CNAN ·
Binance, Deribit remove SignalPlus API keys after security issue
Neutral Plain report of the key removals and exchanges' assurances, with Zhao's advice to users.
Right1 article
-
IJRRC ·
Binance and Deribit revoke SignalPlus API keys after security report
Neutral Concise report that highlights what remains unknown and lists precautionary steps for users.
- 5 Nov 11:08 First CNAN Binance, Deribit remove SignalPlus API keys after security issue
- 5 Nov 11:12 +3m IJRRC Binance and Deribit revoke SignalPlus API keys after security report
Times are when each article was published, or when we first saw it if the outlet gave no time.
Ask about this story
Loading…