HyperAgent is built with security at its core. Your funds stay in your wallet, your keys are encrypted, and the agent wallet can trade but never withdraw.
Three core principles guide our security design: no fund custody, trade-only access, and encrypted at rest.
HyperAgent never holds your funds. All assets remain in your wallet under your full control at all times.
The agent wallet is authorized to place and cancel orders on Hyperliquid, but cannot withdraw, transfer, or deposit funds.
Agent private keys are encrypted at rest using AES-256-GCM authenticated encryption and never exposed to the browser.
When you log in with your wallet, we use a standard cryptographic challenge-response flow. Your private key is never shared — it stays in your MetaMask wallet.
Connect Wallet
You approve the wallet connection in MetaMask — no transaction is sent.
Sign a One-Time Message
You sign a structured SIWE (Sign-In with Ethereum, EIP-4361) message containing the app's domain, your address, a nonce, and a timestamp. MetaMask displays this as a recognizable login prompt — not as arbitrary text. No gas is spent.
Session Created
A secure, httpOnly cookie is set. You remain logged in for 72 hours without re-signing.
This is the most important security mechanism. HyperAgent uses Hyperliquid's API Wallet to ensure your funds can never be withdrawn by the trading agent.
How it works: When you set up HyperAgent, a separate agent keypair is generated. You approve this keypair on-chain through Hyperliquid's exchange — this is a one-time transaction. From that point on, the agent can only trade on your behalf. The private key is encrypted with AES-256-GCM and stored server-side, decrypted only at the moment a trade is executed. The agent approval automatically expires after 90 days.
Transparency matters. Here is every wallet operation HyperAgent performs and why it is needed.
Wallet Connection
Connect your wallet to HyperAgent for authentication
Sign Message
One-time login via wallet signature — no transaction, no gas fee
Switch Network
Automatically switch to Arbitrum for USDC credit purchases
Send Transaction
Only when you manually purchase credits via USDC — you approve the amount in MetaMask
Read Balance
Check your USDC balance before allowing a purchase — read-only, costs no gas
We follow industry best practices for data protection, from transport to storage.
HyperAgent only interacts with two contracts. Both require your explicit wallet approval.
Used only when you purchase platform credits.
transfer() — you send USDC to the platform treasurybalanceOf() — read-only check of your balanceAddress: 0xaf88...e5831
Called once during agent setup, then never again.
approveAgent() — one-time authorization for the agent to tradeLearn more: Hyperliquid API Wallet docs
Your funds are safe. Your keys are yours. The agent can trade but never withdraw.
Launch Agent