Deribit Removes SignalPlus API Keys After Potential Security Alert

Deribit revoked API keys tied to SignalPlus after the service flagged a potential security risk, halting activity through the connection; Deribit said its investigation found no signs its systems or data were affected.

SignalPlus alerted Deribit to the potential risk. Deribit removed keys linking affected user accounts to the service as a precaution.

Trading, monitoring and automated operations run through SignalPlus stopped after the keys were removed. Deribit advised affected users to sign in directly and review open orders, positions and recent account activity.

Users should wait for SignalPlus to confirm that the connection can resume before creating replacement API keys. Deribit said new keys should have IP whitelisting enabled and accounts should use two-factor authentication.

API keys let an outside service connect to an exchange account for functions such as trading and monitoring. The next step is for SignalPlus to confirm the connection can be restored; users were told to wait for that confirmation before making new keys.