We can't touch your money. By design.
The whole system is built around one rule: your funds stay on your own exchange account, and we only ever place trades. Here's exactly how that works.
You create a trade-only key
In Bybit you generate an API key with the withdrawal permission switched off. It can trade, but it cannot send funds anywhere.
We verify & encrypt it
Before storing, we check with Bybit that the key truly can't withdraw. We then seal it with envelope encryption — a per-record key, wrapped by a master key.
The engine only trades
From then on the engine can open and close positions on your account — and nothing else. No transfers, no withdrawals, ever.
What we can and can't do with your account
Envelope-encrypted keys
Each key is sealed with its own data key, wrapped by a master key. Ciphertext is bound to your account so it can't be reused elsewhere.
Revoke anytime
Remove a key here, or revoke it in Bybit. Either instantly cuts off all access — you're never locked in.
Isolated from the public web
The trading core runs separately from the public website. The site you're on never has direct access to trading.
Start trading on your own account
Create an account, connect a trade-only key, and pick a plan. Your funds never leave your custody.
Get started