CryptoBoost AI

What does non-custodial mean for an automated trading bot?

Non-custodial means the bot can trade your money but never holds it. That is a real protection, but it is not the same as “no risk”. Here is what it covers, what it does not, and how to check a bot's claim yourself.

[ Security ] Published 5 min read

What “custody” actually means

Whoever can move the money has custody of it. It does not matter whose name is on the account or what the terms of service say. If a company can send your balance somewhere without your signature, it has custody.

A trading bot needs to trade your money. It does not need to move it. A non-custodial bot is built around that difference: it gets the first power and never the second.

Three ways a bot can trade for you

Most automated trading products fall into one of three models. The difference is where your money sits and who can move it.

1. Bot on a centralised exchange

Your funds sit in an exchange account. The exchange has custody, and the bot connects with an API key. If the exchange freezes withdrawals, is hacked or fails, your funds are at risk no matter how the bot behaves.

2. Vault or pooled fund

You deposit into a shared account that a manager trades, and you receive a share of the result. On Hyperliquid, vaults work this way: you earn a share of the vault's profits or losses, and withdrawals follow the vault's rules, which can include a lock-up period. You no longer control the trades, only your share.

3. Non-custodial bot

Your funds stay in your own account. You give the bot a narrow permission to trade, and nothing more. On Hyperliquid, that permission is an API wallet. It can place, change and cancel orders, but Hyperliquid only accepts withdrawals and transfers when your own wallet signs them.

Side by side

Non-custodial bot

  • Funds stay in your own account
  • Only your wallet can withdraw or transfer
  • You can see every trade in your own history
  • You can revoke access yourself, at any time

Custodial or pooled

  • Funds sit with an exchange or in a shared account
  • Someone else can move them, or sets withdrawal rules
  • You see what the provider chooses to show you
  • Stopping may depend on their process or a lock-up

What non-custodial does not protect you from

Non-custodial answers one question: can someone take my money? It does not answer can I lose money? You still carry these risks:

  • Trading losses. The bot trades your real balance. A losing strategy loses your money exactly as it would with any other model.
  • Leverage and liquidation. Perpetual futures use margin. A sharp move can liquidate a position, and the loss lands in your account.
  • Unwanted trading. An API wallet can trade any market on the account. If a bot misbehaved or its key leaked, it could open bad trades. It still could not withdraw.
  • Platform risk. Your funds are on Hyperliquid, so you rely on Hyperliquid itself working as intended.

Treat “non-custodial” as a statement about who controls your funds, not about how safe the strategy is. Judge the strategy separately.

The responsibilities that come with control

If nobody else can move your money, nobody else can do certain things for you either:

  • Wallet security is yours. Anyone with your seed phrase or private key has full custody. Never share them, including with a bot.
  • Fees are paid by you. A non-custodial bot cannot take its fee from your account, because it cannot transfer funds. CryptoBoost, for example, calculates its performance fee monthly and you pay it in USDC, using the payment details on your bill.
  • Leftover permissions are yours to clean up. When you stop using a bot, check that its API wallet is removed.

How to check a “non-custodial” claim

  1. Look at what you are asked to sign. Setup should ask you to approve an API wallet, not to deposit to the bot's address or sign a withdrawal.
  2. Check where the funds are. Your balance should stay visible in your own Hyperliquid account after you connect.
  3. Check the permission on Hyperliquid. The bot's API wallet should appear on Hyperliquid's API page, where you can remove it.
  4. Check the trades. Every trade the bot makes should appear in your own Hyperliquid trade history.

For the full list of what an API wallet can and cannot do, read what permissions a Hyperliquid trading bot needs.

Common questions

Can a non-custodial bot lose my money?

Yes. It cannot take your funds, but it trades them. Trading losses, liquidations and fees all affect your balance, the same as if you placed the trades yourself.

Is non-custodial the same as decentralised?

No. Decentralised describes the platform, for example an on-chain exchange like Hyperliquid. Non-custodial describes who controls your funds. A bot can run on a decentralised exchange and still be custodial if it asks you to deposit into its own account.

How does a non-custodial bot get paid?

It cannot take fees from your account, because it has no permission to transfer funds. Depending on the product, you pay fees yourself or approve a capped fee on each order. CryptoBoost calculates its fee monthly and you pay it in USDC, using the payment details on your bill.

What happens to my funds if the bot company shuts down?

They stay in your own Hyperliquid account. You can remove the bot's API wallet on Hyperliquid and manage or withdraw your funds with your own wallet.

Sources

Your account.
Your keys.

Activate your AI →

Perpetual futures carry substantial risk of loss · This article is general information, not financial advice

Security

What permissions does a Hyperliquid trading bot need?

What an API wallet allows, what no bot should ever ask for, and how to check and revoke a bot's access on Hyperliquid.

6 min read → Security

What permissions does CryptoBoost get on your Hyperliquid wallet?

The bot can place trades for you, but it can never withdraw or transfer your funds. Here is how the API wallet works and how to revoke it.

5 min read →