Binance disconnected SignalPlus on Nov. 5 after an attacker compromised an engineer’s computer through a fake Microsoft Teams meeting invitation. The platform revoked all user API keys linked to it on Binance and Deribit, halting trading, monitoring and automation through SignalPlus, while both exchanges said their systems and user funds were unaffected. SignalPlus estimated losses below $82,000, said reimbursements had begun and pledged to repay all affected users in full. Users were advised to check positions and open orders directly on the exchanges, wait for the full resolution before reconnecting API keys and enable IP allowlisting. The investigation traced the intrusion to a compromised Telegram account belonging to a contact at a third-party technology vendor, and SignalPlus pledged to strengthen its security controls, key management and access restrictions.
Source: Read the original article
