Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack

Exchanges Binance and Deribit said Thursday they had revoked API keys connected to crypto derivatives trading platform SignalPlus as a precaution following a security breach. Both exchanges said their own systems were unaffected, while Deribit warned that trading, monitoring and automation through SignalPlus had stopped working for its customers.

Binance co-founder Yi He also urged third-party platforms integrated with the exchange to review their security controls and monitor for suspicious activity, warning that the threat extended beyond any single company.

SignalPlus provides trading infrastructure for crypto derivatives, particularly options, allowing professional and institutional traders to manage positions across multiple exchanges through a single platform.