Pesquisa verificada por fontes: Binance Signed Endpoint Percent
O corpo do artigo aparece no original em inglês verificado. A tradução será adicionada após revisão das fontes.
Verified Fact Boundary
1. Binance Spot Block Matching changelog states that a REST API signing change will require percent-encoding payloads before computing signatures and warns of INVALID_SIGNATURE rejection for non-compliant requests. 2. Binance General REST API Information documents SIGNED endpoints, timestamp, recvWindow and signature examples. 3. Binance REST API documentation includes examples for HMAC, RSA and Ed25519 signing and explicitly addresses non-ASCII characters in signing payloads. 4. Binance Rebate changelog repeats the same percent-encoding warning for signed REST API behavior. 5. A local signature unit test passing on ASCII-only fixtures does not prove that non-ASCII symbols, encoded payloads or body-plus-query concatenation are handled correctly. 6. The migration should be treated as a signing-library compatibility test, not as a new trading recommendation or fee claim.
Recolher análise
Decision Matrix
Tabela do artigo: role na horizontal ou selecione a área da tabela e use as teclas de seta.
| Check | What it means | Practical action | Unknown to keep explicit |
|---|---|---|---|
| Affected signing path | the risk sits in payload construction before cryptographic signing | inventory every internal client that builds signed Binance requests | undocumented third-party wrappers that reserialize payloads |
| Fixture coverage | ASCII-only examples can miss encoding defects | test ASCII, non-ASCII, query-only and body-plus-query payloads | symbols or parameters not present in test fixtures |
| Timing controls | timestamp and recvWindow still decide whether signed requests are accepted in time | avoid changing time windows while changing encoding | clock skew during deployment |
| Product scope | Binance product-family changelogs may surface the same signing requirement in different places | verify every product family used by the bot before production rollout | private endpoints not covered by public examples |
| Failure evidence | INVALID_SIGNATURE can come from multiple signing defects | log non-secret payload-shape hashes and error labels, not secrets | whether support can distinguish encoding failure from key misuse |
| Rollback | a signing migration should be reversible until all endpoints pass | keep old and new signer paths behind a controlled release flag | whether historical orders need replay or only future requests change |
| Commercial boundary | API compatibility does not prove better execution, lower fees or account eligibility | report it as operational readiness only | future exchange-side changes after the documented date |
Source Map
- Binance Developer Documentation: Spot Block Matching Change Log (binance-spot-block-matching-changelog)
- Binance Developer Documentation: General REST API Information (binance-spot-rest-api)
- Binance Developer Documentation: Rebate Change Log (binance-rebate-changelog)
Control Notes
1. Affected signing path
Affected signing path is the decision point where public documentation must become an operating rule. In this package, it means the risk sits in payload construction before cryptographic signing. The practical action is to inventory every internal client that builds signed Binance requests. The unresolved edge is undocumented third-party wrappers that reserialize payloads, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
2. Fixture coverage
Fixture coverage is the decision point where public documentation must become an operating rule. In this package, it means ASCII-only examples can miss encoding defects. The practical action is to test ASCII, non-ASCII, query-only and body-plus-query payloads. The unresolved edge is symbols or parameters not present in test fixtures, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
The operating test is also narrow. A public page can prove public wording.
3. Timing controls
Timing controls is the decision point where public documentation must become an operating rule. In this package, it means timestamp and recvWindow still decide whether signed requests are accepted in time. The practical action is to avoid changing time windows while changing encoding. The unresolved edge is clock skew during deployment, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
The operating test is also narrow. A public page can prove public wording.
4. Product scope
Product scope is the decision point where public documentation must become an operating rule. In this package, it means Binance product-family changelogs may surface the same signing requirement in different places. The practical action is to verify every product family used by the bot before production rollout. The unresolved edge is private endpoints not covered by public examples, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
The operating test is also narrow. A public page can prove public wording.
5. Failure evidence
Failure evidence is the decision point where public documentation must become an operating rule. In this package, it means INVALID_SIGNATURE can come from multiple signing defects. The practical action is to log non-secret payload-shape hashes and error labels, not secrets. The unresolved edge is whether support can distinguish encoding failure from key misuse, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
The operating test is also narrow. A public page can prove public wording.
6. Rollback
Rollback is the decision point where public documentation must become an operating rule. In this package, it means a signing migration should be reversible until all endpoints pass. The practical action is to keep old and new signer paths behind a controlled release flag. The unresolved edge is whether historical orders need replay or only future requests change, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
The operating test is also narrow. A public page can prove public wording.
7. Commercial boundary
Commercial boundary is the decision point where public documentation must become an operating rule. In this package, it means API compatibility does not prove better execution, lower fees or account eligibility. The practical action is to report it as operational readiness only. The unresolved edge is future exchange-side changes after the documented date, so the article keeps that edge explicit instead of turning it into a reward claim, licensing claim, approval claim, recovery guarantee, price implication, settlement guarantee or platform ranking.
The operating test is also narrow. A public page can prove public wording.
Known Unknowns
- undocumented third-party wrappers that reserialize payloads
- symbols or parameters not present in test fixtures
- clock skew during deployment
- private endpoints not covered by public examples
- whether support can distinguish encoding failure from key misuse
- whether historical orders need replay or only future requests change
- future exchange-side changes after the documented date
Practical Takeaway
Binance developer documentation now makes percent-encoding part of the signed-payload control surface for affected REST examples, and the Spot Block Matching changelog warns that requests not following the order will be rejected with INVALID_SIGNATURE from the stated effective time. The decision outcome is to test signing libraries with ASCII and non-ASCII payload fixtures, keep timestamp and recvWindow handling unchanged, and verify every affected product family before rotating production keys or changing bot order flow. The article stops at the evidence boundary. It helps the reader decide what to inspect next without converting public documentation into a promise that a private account, wallet, callback, policy framework, settlement route or liquidity position will work under every future condition.
Fontes
03- Spot Block Matching Change Log · developers.binance.com
- General REST API Information · developers.binance.com
- Rebate Change Log · developers.binance.com