Binance and Deribit said on Thursday that they had revoked API keys linked to SignalPlus, a crypto derivatives trading platform. Both exchanges called it a precaution after a security breach at SignalPlus. The story was published on Nov 5, 2026.
SignalPlus said the attackers got into the computer of one of its engineers. The headline says this was done with a fake Microsoft Teams invite. SignalPlus put the losses at less than $82,000 and said it would pay all of it back.
The source does not say whose funds were lost, how many users were affected, or when SignalPlus says the breach started. It also does not say whether the two exchanges will reissue the keys or when. Those points are not yet known.
For someone already holding a perpetual position on Bitget, Bybit, MEXC or OKX, this changes nothing directly. None of those four exchanges is named in the story, and nothing in it touches funding rates, fees or liquidity on them. The only people directly affected are those whose SignalPlus connections to Binance or Deribit ran on the revoked keys.
Source: cointelegraph — Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack