SignalPlus: Attack stemmed from compromised third-party Telegram account, losses under $82,000 and will be fully reimbursed

November 5 - The crypto derivatives trading tool platform SignalPlus announced that it suffered an attack in the early hours of November 4, originating from the theft of a third-party Telegram account, affecting a small number of accounts that had not enabled IP whitelisting. The team stated that they quickly detected and contained the intrusion. As a precautionary measure, they have revoked all associated API keys in collaboration with centralized exchange partners and temporarily suspended terminal services. The official statement said total losses were less than $82,000, affected users will receive full compensation, and full service is expected to be restored in the coming days, with subsequent updates and operational guidance to be released through official channels.

Earlier this evening, Binance stated that in response to the potential security issue reported by third-party platform SignalPlus, it has taken precautionary measures by proactively revoking all API keys associated with SignalPlus. Binance emphasized that its own systems were unaffected and user funds are safe. Binance reminded SignalPlus users to log directly into their Binance accounts to check positions and open orders, not to re-bind API keys until SignalPlus confirms the issue is fully resolved, and recommended always enabling IP whitelisting.