Exchanges Binance and Deribit severed ties with SignalPlus after a phishing attack allowed hackers to exploit API access, prompting a platform-wide security overhaul and service suspension.
A phishing attack on derivatives infrastructure provider SignalPlus led Binance and Deribit to revoke API keys on Thursday, Nov. 5, and suspends services for days. Losses were under $82,000, fully reimbursed, and both exchanges said their own systems were unaffected, so the direct market impact is minimal. Coming days after Binance disclosed a $6.3 billion hack on Oct. 29, it may only marginally weigh on sentiment toward crypto platform security.
No. The breach hit SignalPlus, a third-party trading platform, with losses under $82,000 that are being reimbursed; Binance and Deribit said their own systems were unaffected.
As a precaution, because attackers used a compromised SignalPlus engineer's computer, and Binance warned the threat could extend beyond a single company.
Binance and Deribit have revoked API keys linked to SignalPlus following a phishing attack that compromised an engineer's computer. The breach resulted in losses of less than $82,000, which the platform has pledged to reimburse in full while suspending operations for security reviews.
No. The breach hit SignalPlus, a third-party trading platform, with losses under $82,000 that are being reimbursed; Binance and Deribit confirmed their own systems remain unaffected.
API keys were revoked as a precaution after attackers gained access to a SignalPlus engineer's computer, creating a potential vulnerability for connected exchange accounts.