SignalPlus, a Hong Kong trading tools platform used for crypto options and automated strategies, reported a potential security issue, prompting two major exchanges to cut its access to user accounts.

Binance proactively revoked all API keys linked to SignalPlus and said its own systems are unaffected and user funds are safe. Deribit also removed SignalPlus-linked keys as a precaution, stating it found no indication of impact on its systems or data.

Any automated strategy running through SignalPlus on Binance or Deribit is now disconnected until users create fresh keys.

Both exchanges advised affected users to review their positions and open orders and to wait for SignalPlus to confirm the issue is resolved before reconnecting. SignalPlus has not yet published a full account of the incident.