Custody and keys

No deposit account

There is no platform wallet that user funds pass through and no pooled balance. This is worth stating plainly because it removes an entire category of risk: there is nothing to drain, nothing to mismanage, and no moment at which your money is in someone else's custody waiting to be given back. What the interface shows as your balance is the wallet itself, read live.

Withdrawing your own funds is self-service and requires nobody's approval. If that ever needs an administrator, something has gone wrong with the design.

Revocable signing authority

Automation requires that trades can be signed while you are not present. That authority is granted explicitly by you, scoped to the wallet you connected, and revocable at any time — after which nothing can be signed on your behalf. The platform never sees, stores or transmits a private key, and there is no path by which one could be displayed or exported.

Withdrawals

A withdrawal validates the destination, reserves against your available balance, and is submitted once. Repeating the request returns the existing withdrawal rather than creating a second one, so a double-tap or a retry cannot send twice. Capital committed to open positions is shown as committed and is not available to withdraw until those positions close — with the amount and the reason both stated.

Administration

Privileged access is verified on the server for every action, not assumed from the interface, and there is deliberately no ability for anyone to edit a user's balance. Every privileged action is recorded with who took it, when, and why. Emergency controls exist for genuine incidents — pausing new entries platform-wide, for example — and are audited like everything else.

Further specifics of the security model are shared directly with partners and investors rather than published, for the obvious reason.