SignalPlus suffers network attack with losses under $82,000, promises full compensation to affected users.

SignalPlus disclosed a cyberattack on Nov. 4 after a third-party vendor's compromised Telegram account led an engineer to download malware via a fake Microsoft Teams invite, giving attackers access to its internal network. Total losses came to under $82,000, and the options trading platform pledged full reimbursement to affected users. SignalPlus said it halted the attack, had partner exchanges disable all linked API keys, and paused services for a full security review, acknowledging it had not previously required IP whitelisting on exchange API keys. The platform plans tighter API access controls, stronger endpoint security and stricter internal permissions, with services to resume in phases over the coming days while users manage accounts and positions directly on partner exchanges. The incident highlights operational and third-party risk at crypto derivatives venues even when direct financial losses stay small; watch for the phased restoration timeline and whether IP whitelisting becomes standard across similar platforms.