Your funds stay on your DEX.
TIYlab places orders through a restricted DEX Agent approved from your non-custodial wallet. Security relies on several complementary controls and on the correct configuration of your account.
Assets remain on your DEX
Your assets are never transferred to TIYlab and remain in your Hyperliquid or Aster account.
External withdrawals disabled
The Agent approved from your non-custodial wallet is trading-only. TIYlab never asks for your seed or master private key.
Progressive, isolated simulated trial
The trial starts without a wallet or Agent. Optional verification uses only a public address; the simulation engine cannot place orders and keeps its state separate from Live mode.
Secrets follow the execution mode
In Hosted mode, the dedicated Agent secret is encrypted on TIYlab infrastructure. In Self-Hosted mode, it remains only on the customer's VPS and is never sent to the Control Plane.
Choose where the Runtime runs
Hosted is managed by TIYlab; Self-Hosted runs the same logical Runtime on the customer's VPS. A generation fence prevents two active executors for one account.
Continuous controls
Runtime guards, position reconciliation and alerts monitor operational inconsistencies.
Client isolation
Each DEX authorization belongs to one client and every bot state is stored separately.
DEX security model
- Free simulation: no wallet, signature, Agent or real order.
- Optional verification: public address only, public-data reads and still no trading.
- Live after payment: authorization of each new dedicated, restricted trading Agent.
On Hyperliquid, the master key is never shared and the dedicated Agent can trade without external withdrawal or transfer access. On Aster, the versioned contract requests canSpotTrade=true, canPerpTrade=true, canWithdraw=false, TIYlab IP whitelisting and expiry. The internal release records the funded Spot and Perp lifecycles as validated on Testnet; the sanitized raw report is not published.
The Agent's actual deadline and a countdown appear in daily Telegram summaries. From D-30, the client and administrator are notified every day until renewal is validated. /changeapi pauses bots without selling positions, checks the new Agent, then restores only the previously active bots.
DEX balances are funded and withdrawn only by you. Any Aster transfer is limited to internal collateral within the same account. No status constitutes an absolute security guarantee.
Control status
Internal technical controls updated on 2026-09-14. They cover permissions, runtime safeguards, reconciliation and order recovery. No independent security audit or external legal opinion is represented as completed.
Your security checklist
Enable two-factor authentication on Telegram, secure your wallet and VPS where applicable, review every authorization and do not trade manually on the account operated by TIYlab.
When an incident occurs
When an operational inconsistency is detected, safeguards may suspend new actions and raise an alert. Revoking the Agent at the DEX disables automation, but does not automatically close positions or their risks. Check /status first when circumstances allow; in an emergency, manage positions at the DEX, revoke the Agent, then contact TIYlab through /support.
Security limitations
Disabling external withdrawals does not remove every risk. A compromised Agent could allow harmful orders, fees or losses. A non-custodial model alone does not protect against market, smart-contract, oracle, liquidation, wallet, VPS, protocol, availability or cybersecurity risks.