Security
Non-custodial, by construction.
NyxGo is an interface, not a vault. Your funds stay in your own account on the exchange and withdrawals always need your wallet. The keys that trade for you can’t withdraw, and each one is renewed every 30 days.
At a glance
- Funds never leave your own accounts
- Your orders signed in your browser, sent straight to the exchange
- Agents trade only within limits your wallet signs
- Neither key can withdraw, and both are renewed every 30 days
- NyxGo never holds a key that can withdraw your funds
The flow
What happens when you trade
- Step 1
Sign in with Ethereum
Your wallet signs a one-time message that proves you own the address. It is not a transaction: no gas, no approval, no access to funds. The sign-in code expires after 10 minutes.
- Step 2
Enable trading
Your browser generates a fresh trading key. Your wallet signs an approval on the exchange that lets that key trade for your account for 30 days — and, if a NyxGo fee is active, a separate approval for its maximum rate.
- Step 3
Trade without pop-ups
Each order is signed by the trading key inside your browser and sent directly to the exchange. NyxGo’s servers never receive this key and never sit between your orders and the order book.
- Step 4
Settle on-chain
Orders match on the exchange’s on-chain order book. Positions, margin and fills live in your own account, verifiable on-chain by anyone.
Optional · Agents
Let agents trade while you’re away
Your wallet approves a second key, the Agents key, and signs the limits of each agent you start. Agent orders are signed by NyxGo’s signer, only inside those limits, and sent to the exchange from NyxGo’s servers.
Permissions
Who can do what
Two keys can trade for you, and neither can withdraw. Both are “API wallets”: the exchange protocol rejects any withdrawal, payment or approval either one signs.
Of these keys, NyxGo holds only the Agents key, and only once you set up agents. It adds its own limits on top: its signer signs just the orders that fit the limits you signed, and never changes your leverage or transfers USDC.
| Action | Your walletYou | Trading keyYour browser | Agents keyNyxGo’s signer |
|---|---|---|---|
| Place, cancel and close orders | Can | Can | Only within the limits you signed |
| Adjust leverage | Can | Can | Protected: NyxGo’s signer only signs within your limits |
| Move USDC between your own exchange accounts | Can | Can | Protected: NyxGo’s signer only signs within your limits |
| Withdraw USDC | Can | Protected: the exchange doesn’t allow it | Protected: the exchange doesn’t allow it |
| Send funds to someone else | Can | Protected: the exchange doesn’t allow it | Protected: the exchange doesn’t allow it |
| Approve or replace keys | Can | Protected: the exchange doesn’t allow it | Protected: the exchange doesn’t allow it |
| Approve a builder fee | Can | Protected: the exchange doesn’t allow it | Protected: the exchange doesn’t allow it |
- Can
- Only within the limits you signed
- Protected: the exchange doesn’t allow it
- Protected: NyxGo’s signer only signs within your limits
Where your trading key lives
The key is created in your browser and saved in that browser’s local storage, separately for each network and account — the standard model for API wallets. It is never sent to NyxGo.
- Renewed every 30 days. Its approval on the exchange runs for 30 days, and signing out revokes it. Renewing approves a new key that replaces the old one.
- Limited blast radius. Anyone who got hold of the key could place trades and move USDC between your own exchange accounts — but could not withdraw your funds.
- Treat the device as trusted. Browser storage is readable by software running in your browser, so avoid untrusted extensions and shared computers.
Where the Agents key lives
Agents keep working after you close the tab, so their key can’t live in your browser. When you set up agents, NyxGo’s signer creates a separate key, the Agents key, and your wallet approves it on the exchange for 30 days. The wallet shows that approval as “nyx automations”. It sits alongside your trading key and never replaces it.
Good to know. The Agents key can trade, and nothing more: it can never withdraw your funds or send them anywhere. Because trading is still real, the key is built to stay contained: it never leaves the signer, it’s renewed every 30 days, you can revoke it any time, and NyxGo signs nothing outside the limits you signed.
- Sealed in an isolated signer. The signer generates the key and keeps it encrypted. It can’t be reached from the internet, only NyxGo’s trading engine talks to it, and the key never leaves it.
- Your limits, on every order. Each agent runs on limits your wallet signs: the market, the side, the size of each order and the total, how far from the market price it may trade, the spacing between orders and an end date. The signer checks every order against them, and against its own market prices, before it signs.
- A fresh key every 30 days. Renewal opens 5 days ahead and approves a brand-new key; an old one is never reused. If a renewal is missed, agents pause until you renew.
- Revocable any time. Revoke it in the app and NyxGo pauses your agents and securely deletes the key. The app can also revoke it on the exchange, with a signature from your wallet.
- A platform kill switch. NyxGo can stop every agent from opening new positions at once. Cancelling orders and protective stops keep working while it’s on.
- If NyxGo is down, agents stop. Orders already on the exchange stay there, including a trailing stop’s last stop, which keeps protecting your position.
Moon AI reads, and never trades
Moon AI, the AI assistant in the app, holds no key of any kind. It reads live market data and, while your wallet is connected, the snapshot of your positions your app sends with a question. The one thing it makes, an order draft, only fills your order form: you still review and sign every order yourself.
Good to know. Moon AI is an AI assistant, so treat its answers as a well-informed second opinion. It’s built to stay safe even when it’s wrong: it has nothing to act with, its answers are checked before you see them, and every order still needs your signature.
- No key, no access. It can’t place, change or cancel orders, move funds or withdraw. It has nothing to do it with.
- Secrets stay on your device. A recovery phrase or private key typed into Moon AI is caught in your browser and never sent, and Moon AI will never ask for one.
- No links. Outside links are removed from every answer, including any in the community posts it reads, so it can’t send you to a lookalike site.
- One job. Questions outside trading, attempts to change its rules and requests to manipulate markets get a fixed refusal before the AI ever sees them.
- Private by default. Your questions only go to AI providers that don’t store them or train on them, with wallet addresses removed first. Conversations are deleted when you delete them, or after 90 days without use.
Your NyxGo account
Protected on our side, too
Hashed sessions
Your NyxGo session lives in an HttpOnly cookie that page scripts can’t read, and only a hash of its token is stored on our side. The IP address and device recorded at sign-in are deleted after 7 days.
Short-lived tokens
The community and realtime services accept signed access tokens that expire after 15 minutes. No service shares a signing secret.
Moderation that bites
Suspensions and bans propagate across NyxGo within seconds, and a ban signs the account out everywhere.
Audited back office
Staff access is role-based: only a few senior roles can see wallet addresses, and staff access to personal and trading data is logged.
Stay safe
7 habits worth keeping
- 1
NyxGo will never ask for your seed phrase or private key — not in support, not in DMs, not anywhere.
- 2
Check the address bar before connecting your wallet, and bookmark the real site.
- 3
Read what your wallet asks you to sign. Enabling trading approves a trading key for 30 days, and setting up agents approves the Agents key, shown as “nyx automations”, for 30 days. Neither ever grants withdrawals.
- 4
On a shared or untrusted computer, sign out when you’re done — signing out revokes the trading key on the exchange.
- 5
Review your agents and their limits now and then. If you stop using them, or anything looks off, revoke the Agents key — in the app, and on the exchange too.
- 6
Keep the wallet that owns your funds on a hardware device if you can.
- 7
The real Moon AI never asks for your recovery phrase and never sends you links. If something claiming to be Moon AI does, close it and let us know.
Found a vulnerability?
Please report it privately so we can fix it before it’s disclosed.