Fund security

The custody model

So the AI can manage positions and the hedge around the clock without your input, the bot stores the working wallet’s private key encrypted and signs transactions on your behalf. This is a custodial model: it is convenient and fully automated, but it requires trusting the service. If that does not suit you, connect an external wallet (e.g. Phantom): you then sign every transaction yourself, but automated management is not available. We take key storage seriously — the concrete protections are below.

How we protect keys

• Your private key is stored only encrypted, with envelope encryption: each record has its own data key, wrapped by an AWS KMS master key that never leaves KMS.
• Decryption happens only at signing time and only in memory. AWS KMS only ever receives the wrapped data key — never the private key itself.
• Records not yet migrated to KMS still use the legacy scheme: AES (Fernet) with a key derived from a master password via PBKDF2 (600,000 iterations) and a unique salt per record.
• Keys are never written to logs or shared with third parties.
• Server access is restricted, secrets are locked down by file permissions, and security updates are applied automatically.

Withdrawal controls

• With 2FA enabled, withdrawals, swaps, hedge actions and changes to the whitelist or limits require a 2FA code.
• A 24-hour withdrawal limit (set in settings) — then a large amount cannot be withdrawn at once.
• Address whitelist: withdrawals only go to addresses you pre-approved (when enabled).
• Unsafe-recipient blocking: you cannot accidentally send funds to a token/contract address.
• Alerts on large operations and security-setting changes.

What we do NOT do

• We never ask for your seed phrase and never touch your main wallet — the bot uses a separate wallet.
• We do not use your funds for anything other than managing LP positions, hedging within the strategy, and your withdrawals.
• We do not promise profit and do not hide the risks.

Your part

• Use a separate wallet made specifically for the bot — not your main one.
• Deposit only funds you can afford to lose.
• Enable 2FA, the address whitelist and withdrawal limits in settings for extra protection.