Binance cuts off trading platform SignalPlus after hackers break in with a fake Teams invite
Binance and Deribit revoked exchange API keys linked to SignalPlus after a security breach, disrupting trading and account-monitoring functions through the platform. SignalPlus said an attacker compromised an engineer’s computer using a fake Microsoft Teams invitation sent from an impersonated vendor contact. The company reported losses below $82,000 so far, said it had contained the intrusion and begun reimbursing affected users, and suspended services for a security review. Both exchanges said their own systems and customer funds were unaffected. They advised users to check accounts directly, review orders and positions, enable IP allowlisting and avoid reconnecting keys until SignalPlus confirms restoration. SignalPlus said it would strengthen security controls and resume services in phases, without setting a reopening date.
