Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack
Binance and Deribit revoked API keys linked to SignalPlus after a breach, saying their own systems were unaffected. SignalPlus said an attacker used a compromised third-party vendor’s Telegram account to impersonate a contact, trick an engineer with a fake Teams invite and gain access to its internal network. The company detected and contained the intrusion, reported losses below $82,000, and said it would reimburse affected users. It suspended services while reviewing security and applying patches, and acknowledged that it had not required IP whitelisting for exchange API access. Binance co-founder Yi He urged integrated third-party platforms to strengthen security and monitor suspicious activity. The incident followed a separate, much larger Binance hack described in the article.
