Binance and Deribit Revoke SignalPlus API Keys After Fake Teams Invite Attack

Major cryptocurrency exchanges Binance and Deribit have revoked API keys linked to SignalPlus after the trading platform suffered a security breach involving a fake Microsoft Teams invitation. SignalPlus disclosed that attackers compromised an engineer's computer, resulting in losses of under $82,000. The company has pledged to fully reimburse affected users. The incident underscores the growing threat of social engineering attacks in the crypto sector, where a single compromised endpoint can expose trading APIs and funds. Binance and Deribit acted swiftly to revoke the compromised keys, limiting further damage. SignalPlus is a widely used platform for crypto options and derivatives trading, making the breach particularly concerning for institutional and retail traders alike. The company has not yet detailed the full scope of the attack, but the rapid response from exchanges highlights the importance of coordinated security measures. As crypto markets mature, such breaches serve as a reminder that even sophisticated platforms remain vulnerable to human error and targeted phishing campaigns. Users are advised to review their API permissions and enable additional security layers.