SignalPlus admits API security gap after hack costs under $82K

cryptonews

Yesterday

SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.0a0bd8dc.png","ogUrl":"https://www-web.itiger.com/news/2681001741"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2681001741\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2681001741?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-11-06 04:35","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2681001741","market":"fut","top_or_hot":-1,"title":"SignalPlus admits API security gap after hack costs under $82K","media":"cryptonews","content":"<div>\n<p>SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading ...</p>\n\n<a href=\"https://crypto.news/signalplus-hack-82k-binance-deribit-api-keys/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>SignalPlus admits API security gap after hack costs under $82K</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSignalPlus admits API security gap after hack costs under $82K\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-11-06 04:35 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/signalplus-hack-82k-binance-deribit-api-keys/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading ...</p>\n\n<a href=\"https://crypto.news/signalplus-hack-82k-binance-deribit-api-keys/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK6100","symbol_name":"保健护理服务","start_time":0,"source_url":"https://crypto.news/signalplus-hack-82k-binance-deribit-api-keys/","article_id":"2681001741","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/signalplus-hack-82k-binance-deribit-api-keys/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2681001741","pubTimestamp":1793910903,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading platform.Less than $82,000 was lost, with SignalPlus promising full reimbursement for all affected users.A compromised vendor contact’s Telegram account was used to send an engineer a fake meeting invitation.Binance and Deribit revoked SignalPlus-linked API keys, saying their own systems were unaffected.SignalPlus acknowledged missing mandatory IP whitelisting and suspended services while reviewing its security.According to SignalPlus’s Nov. 5 incident statement, the attack affected a small number of accounts without IP whitelisting. The company said it detected suspicious activity early on Nov. 4 and contained the intrusion before contacting its exchange partners to disable connected customer credentials.TL;DR: In the early hours of Nov 4, SignalPlus was targeted in an attack that began with","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK6100":"保健护理服务","BK4023":"应用软件","BK4535":"淡马锡持仓","BK4503":"景林资产持仓","OTX.SI":"迈怡汇有限公司","BK6520":"工商业服务概念","BK4551":"寇图资本持仓","API":"声网"},"translate_title":"SignalPlus 承认 API 安全漏洞，黑客成本低于 8.2 万美元","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"API":0.9,"OTX.SI":1.5},"content_text":"SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading platform.\n\n\nSummary\n\n\n\nLess than $82,000 was lost, with SignalPlus promising full reimbursement for all affected users.\nA compromised vendor contact’s Telegram account was used to send an engineer a fake meeting invitation.\nBinance and Deribit revoked SignalPlus-linked API keys, saying their own systems were unaffected.\nSignalPlus acknowledged missing mandatory IP whitelisting and suspended services while reviewing its security.\n\n\n\nAccording to SignalPlus’s Nov. 5 incident statement, the attack affected a small number of accounts without IP whitelisting. The company said it detected suspicious activity early on Nov. 4 and contained the intrusion before contacting its exchange partners to disable connected customer credentials.\n\nTL;DR: In the early hours of Nov 4, SignalPlus was targeted in an attack that began with a compromised third-party Telegram account, affecting a small number of accounts without IP whitelisting.We detected and contained the intrusion quickly. As a precaution, we immediately…— SignalPlus (@SignalPlus_Web3) November 5, 2026\n\nReimbursements had already begun on a case-by-case basis when the statement was published. Users who believe they suffered losses were asked to contact the company so it could verify their claims and begin the repayment process.\nSignalPlus traces attack to a fake Teams invitation\nThe company’s investigation traced the initial compromise to a Telegram account belonging to a contact at one of its third-party technology vendors.\nUsing the compromised account, the attacker impersonated the contact and approached a SignalPlus engineer with a fake Microsoft Teams meeting invitation. SignalPlus said the social engineering attack compromised the engineer’s computer, where the intruder then remained dormant.\nIn the early hours of Nov. 4, the attacker began using the employee’s access privileges to target the company’s internal network. After detecting the activity, the team blocked the attack and closed the vulnerabilities it had identified, according to the statement.\nSignalPlus subsequently placed all services into maintenance mode while its staff reviewed security and coordinated the removal of exchange API connections.\nThe platform provides infrastructure for cryptocurrency options and derivatives trading, allowing professional and institutional customers to manage activity across exchanges through one interface.\nExchange access remains available during the suspension\nBinance and Deribit said Thursday that they had revoked API keys linked to SignalPlus as a precaution. Binance said its systems were unaffected and customer funds remained safe, while Deribit said its investigation found no indication that its systems or data had been affected.\nAs previously reported by crypto.news, Binance’s initial API key removal was accompanied by instructions for customers to review positions and open orders directly through the exchange.\nBinance advised users to wait until SignalPlus confirms that the issue has been fully resolved before reconnecting their accounts. It recommended enabling IP whitelisting when setting up API access.\nDeribit warned that trading, monitoring, and automation through SignalPlus had stopped working for its customers following the revocations.\nIn its own statement, SignalPlus clarified that disabling an API key does not mean the associated account information or assets were compromised. The precaution applied to all users, including customers whose accounts were not identified as affected.\nCustomers can still use the exchanges’ official platforms to view and manage their accounts, positions and open orders while SignalPlus remains suspended, the company said.\nSignalPlus accepts responsibility for missing API safeguard\nSignalPlus acknowledged that it had not made IP whitelisting mandatory for exchange API key access, describing the omission as a gap in its safeguards.\nIP whitelisting limits access to specified internet addresses. For an exchange connection, the control restricts where an API key can be used.\n“We take responsibility for this oversight,” the company said.\nIts planned changes include tighter API access requirements, stronger security for development devices, improved internal access controls and changes to key management. SignalPlus said it would deepen threat intelligence sharing with exchanges, technology partners and security firms.\nBinance co-founder Yi He separately urged third-party platforms integrated with the exchange to review security controls, watch for suspicious activity and report concerns immediately.\nServices will return in phases after security checks\nSignalPlus said it expects to bring services fully back online over the next few days, with restoration taking place in phases after a full review, necessary patches, and confirmation that operations can resume safely.\nProgress updates and instructions for customers will be issued through its official channels. The company said its investigation remains ongoing and that it would continue gathering user feedback during the process.\nThe disclosure follows Binance’s separate Oct. 29 theft involving $6.34 billion in cryptocurrency. In its Nov. 3 postmortem, the exchange described how attackers used fraudulent recruitment interviews, malicious development software, and a compromised internal AI tool to reach its wallet infrastructure.\nAccording to that investigation, stolen deployment credentials eventually allowed the attackers to run a malicious script that accessed wallet signing operations.\n\n\n\n\n\n                Read more:\n            \n\n                Paraguay president resigns as Ueno collapse freezes 3 million accounts","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"}}}