The locks it can’t break.
Your money sits behind layered locks. Privy, the site and the engine each check every trade on their own, and no lock depends on trusting the AI.
The wallet is yours.
Privy creates and protects your wallets, and the private key never reaches us. The bot trades from a separate trading wallet, only with the SOL you send to it, and your main wallet grants no permission at all. You withdraw whenever you want, even with the engine off.
Two keys to buy.
Every buy needs the engine’s signature and the site guardian’s, each on a different server. If one of them gets hacked, it can’t buy anything on its own.
Privy blocks the rest.
Every wallet has a policy stored at Privy, outside our servers: only swaps through Jupiter, a cap per buy and no transfer to any other address.
Selling doesn’t depend on the site.
Selling only needs the engine’s key. If the site goes down, your stop keeps working.
The AI never trades on its own.
The AI talks and proposes. Only your click switches a strategy on, and buying and selling is done by the engine, with fixed rules and your plan’s limits.
You’re in charge.
Pause buying or withdraw whenever you want. If you revoke access, Privy refuses any new signature from Executor: it stops buying and selling, and open positions have no stop until you sell.
Every signature, checked twice.
Before signing, the engine and the guardian each check the transaction on their own: only Jupiter, only your wallet, an amount within the cap and no strange destination. Then Privy checks again, against the wallet’s policy.
- Who signs whatThis is how your wallet is set up once you authorize in the app.
- Sell: the engine alone, so the stop works even with the site down
- Buy: the engine and the site’s guardian, together
- Withdraw SOL: only you, from your wallet
- Send to another address: Executor never can