Security

Your money sits in your own account

When you connect your wallet, it sets up a Hidden Hand account that belongs to you, on-chain. Only your wallet can withdraw from it, and only back to your wallet. Nothing we run can move your money anywhere else.

Your trading key can only trade

Trades are signed by a key that lives on your device, so you don't get a wallet popup on every click. It can buy and sell for your account, and that's it: no withdrawals, no changing your settings. Your wallet can switch it off whenever you want, and you can add a password to lock it.

Every trade gets checked

The program doesn't take anyone's word for it. After every buy or sell it checks that your balance moved exactly the way it should, and it only ever deals with the exchange for the trade you actually asked for.

Limits, if you want them

There are no limits by default, so you can trade freely. Want guardrails? Add any of these in Settings:

• A max per trade
• A max per day
• An expiry, after which the key stops until you renew it
• A confirm step for buys over a size you pick

No surprise upgrades

"We can't touch your money" only means something if we also can't quietly swap the program. So any change goes through a multisig held on separate devices, with a 48-hour delay, out in the open. If you ever didn't like a change, you'd have two days to withdraw first. And pausing can only stop new buys. It can never block a withdrawal.

Before real money goes in

Every piece has been tested against the real Solana runtime. Before it holds anyone's real money, it goes through an independent audit and a bug bounty. Until then, real-money trading stays switched off.