Security
What our access can do, how we check it, and what you can see.
1.Your funds stay in your account
We never take custody. You fund an exchange account, sub-account or wallet that you own, and give us trading access only. On request we cancel our resting orders first, so locked balances free up at once.
Exchange | Setup | What the exchange enforces | Your off switch |
|---|
KuCoin | Managed sub-account | The manager can only trade. Withdrawals stay with your master account, and unbinding invalidates every API key on the sub-account. | Unbind the sub-account |
|---|
OKX, Bybit | Managed trading sub-account | The exchange blocks withdrawals for the trading team. You see the equity at any time and unlink with one click. | Unlink the sub-account |
|---|
Kraken, Gate, MEXC, KuCoin, OKX, Bybit | Your account, trade-only API key | You create the key with trading on, withdrawals and transfers off, and restricted to our server IP addresses. | Delete the key |
|---|
Hyperliquid | Agent wallet | Funds stay in your wallet. The agent you approve can place and cancel orders; withdrawals need your main wallet’s signature. | Revoke the agent |
|---|
2.How we check the key before trading
- Where the exchange reports a key’s own permissions (Kraken, Binance), we read them before the first order and refuse any key that can withdraw, add a withdrawal address or transfer, or that has no IP restriction.
- Where the exchange has no such endpoint, we probe a withdrawal-address read and refuse the key if it succeeds.
- We walk through the result with you, and we test the off switch together before go-live.
3.Where keys live
- Exchange keys are stored only in a cloud secrets manager. Our database holds the key’s name and last four characters, never the key itself.
- One running bot per key. A second process cannot pick up a key another bot holds, so there is no shared or copied access.
- Keys never appear in logs, messages, code or tickets.
- Our servers trade from fixed IP addresses, which you add to the key.
4.Order safety
- Order counts are checked against the exchange, not only our own records, before any new order is placed. A circuit breaker halts quoting if the two disagree.
- Inventory and notional limits are agreed with you before we start and enforced in software on every order.
- If a risk check fails for any reason, the order is blocked, never allowed through.
- Self-trade prevention is on for every account we trade.
- Onboarding starts with an observe-only run on your account: the software connects, reads and reports, and sends no orders.
5.Monitoring
- A watchdog independent of the trading process pages our team when a strategy has no orders on the book, when a bot stops reporting, or when order uptime drops.
- Platform events such as a container being killed page us and trigger automatic recovery.
- If our reporting database is unreachable, the bots keep managing their orders from the exchange’s own state. Reporting being down never halts quoting.
6.What you can see
- A live read-only dashboard scoped to your pairs: order uptime, quoted spread, fills, inventory and fees.
- The two numbers our fee credits key off, two-sided order uptime and quoted spread, come from public exchange data you can check yourself.
- Your exchange account’s own order history remains the final record.
7.Questions and disclosures
A full due-diligence pack with questionnaire answers is available on request, and we welcome reports of security issues through the same channel.
Contact us
Market making carries market and exchange risk, which stays with you. Nothing on this page is investment, legal or tax advice, and any engagement is under a written agreement.