Binance has removed all of its API keys associated with crypto trading terminal SignalPlus as an “immediate precautionary measure” following a hack at the third-party firm. 

Binance posted today to its X account, “Binance’s own systems are unaffected. User funds remain safe.”

Crypto derivatives exchange Deribit also removed all SignalPlus API keys in response to a potential incident. 

We also encourage all third-party platforms integrated with Binance to review their security controls, monitor for unusual activity and contact us immediately if they detect any concern
This is not a challenge for any single company…… https://t.co/ESQaw3baqT

SignalPlus has since confirmed on X that it was hacked and under $82,000 worth of user funds was stolen.

It claims it was targeted via a compromised Telegram account belonging to one of its third-party partners.

“Posing as this contact, the attacker communicated with one of our engineers and sent a fake Microsoft Teams meeting invitation,” SignalPlus claimed.

The engineers computer was comprised, and then, by November 4, the waiting hacker “began using the engineer’s access privileges to attack our internal network.”

SignalPlus says it was able to shut down the incident, and that it will reimburse user losses. In the meantime, SignalPlus’ services will remain unavailable until it’s confirmed everything is secure again.

Binance advised its users to review their positions and open orders while waiting for SignalPlus to give the all-clear before “rebinding any API keys, and always enabling IP whitelisting.”

The exchange also called for its third-party partners to “review their security controls, monitor for unusual activity and contact us immediately if they detect any concern.”

Source link