How your funds are protected

Tradyn holds your wallets' keys, so that your bots can trade on their own around the clock. This page explains how those keys and your funds are protected, and what you can do on your side.

Your own wallets

• One recovery phrase per user, created for you when you sign up. Your main wallet and each real bot's wallet come from it.
• One wallet per real bot. A bot only ever trades with the SOL moved into its own wallet. Funds never sit in a pool shared with other users.
• Encrypted keys. Your phrase is stored encrypted, sealed to your account. Keys are only decrypted in memory to sign a transaction, in a form the server can't export.
• Exportable. You can export your phrase, or your main wallet's private key, and open your wallets in Phantom or Solflare, after a security delay. See Wallet keys.
• Where money goes is re-checked. Your deposit address, and the wallets every bot funding, bot return and reward claim moves SOL between, are recomputed from your keys before use. If they don't match what's on record, nothing is shown or sent.

Withdrawals and exports

• Address book with a 24-hour delay. SOL only leaves to addresses you saved at least 24 hours earlier. See Withdrawals.
• Wallet keys after 24 hours. A request for your recovery phrase or private key waits 24 hours, with a banner on every page meanwhile.
• Signed records. Saved addresses and export requests are signed by the server. One added or edited behind its back, straight in the database, is refused.
• Recent sign-in. Withdrawals, new addresses and wallet key exports need a sign-in from the last 15 minutes.
• One withdrawal at a time, and limits on how often sensitive actions can be repeated.

Sessions

• You sign in with a code sent to your email. There is no Tradyn password.
• You stay signed in on your browser until you log out, as long as you come back at least once every 30 days. On a shared computer, log out when you leave.
• Sign out everywhere ends every session on every device at once, and cancels any wallet keys request on its way.

Every swap is checked

• The fee is inside the swap. The Tradyn fee is paid in the same transaction as the swap: no swap without its fee, no fee without its swap.
• Routes are verified before signing. Tradyn builds each swap from Jupiter's route, then checks it before your bot signs: known programs only, your bot's own accounts only, no fee paid to anyone else, and an on-chain minimum that matches the quote.
• Protected from sandwiches. Swaps are sent through Jito with its anti-sandwich marker.
• Results from the chain. Every fill is read from the confirmed transaction, never assumed from a quote.
• Nothing is sent twice. Every swap and transfer is recorded before it's sent, and followed to its end, even across a restart: a bot is never funded twice.

Tradyn's own keys

• The key of Tradyn's treasury, which receives the fees, is never on the server.
• The only platform wallet on the server is the rewards vault. It holds the rewards owed to users and only signs claims to their own wallets.

What you can do

• Secure the account you sign in with. Your email account is the key to your Tradyn account: give it a strong password and two-factor authentication.
• Check your address book now and then, and remove addresses you don't use.
• Never share your recovery phrase or your private key. Tradyn will never ask for them.
• Check the address. The app is only at tradyn.si, and these docs at docs.tradyn.si.
• Act fast if something looks wrong: a banner about a wallet keys request you didn't make, or an address you didn't add. Cancel the request, remove the address, and Sign out everywhere.

Custody

Because Tradyn holds the keys to run your bots, you trust Tradyn to keep them safe while they're there. If you don't plan to trade for a while, you can stop your bots and withdraw your SOL.