Safety and risks
What protects your account, what we cannot protect you from, and what to do if something looks wrong.
Updated Nov 3, 2026 2 min read
On this page
What protects your money
- Non-custodial. Your funds stay on your Hyperliquid account and we have no withdrawal rights.
- Trade-only key. The key can place and cancel orders and nothing else, and we refuse a main wallet key.
- Encrypted at rest. Your key is stored encrypted and not shown again.
- Your own limits. You choose how much of the balance works, and you can pause, protect or close everything at any moment.
- Keeps running. Tarvis runs on our servers, so a dropped connection on your side does not affect trading.
Risks that remain
| Risk | What it means |
|---|---|
| Market risk | A strategy can lose for weeks or months. Falls deeper than any on record can happen. |
| Leverage and liquidation | With leverage, a sharp move can close positions by force at a loss. |
| Backtest vs live | Backtests are hypothetical. Real fills, fees and funding differ. |
| Exchange risk | Your funds are on Hyperliquid, so an outage or failure there affects you. Tarvis cannot prevent that. |
| Stablecoin and network risk | USDC and the Arbitrum network have risks of their own. |
| Technical risk | Software and connections can fail. We build for it, but cannot rule it out. |
| Account compromise | Someone with your Tarvis login could change your settings or stop your trading. They could not withdraw. |
Protect your account
-
Turn on two-factor authentication
Settings → Security. It takes a minute.
-
Use a unique password
Do not share one with other services.
-
Keep your seed phrase to yourself
Nobody from Tarvis will ever ask for it, or for your main wallet's private key.
-
Check the address
Sign in only at tarvis.trade, and be careful with links from messages.
-
Stop new trading
Use Pause new trades or Close everything now on Positions.
-
Cut the key if you suspect a leak
On Hyperliquid, open More → API and remove the agent wallet. Tarvis loses access at once.
-
Tell us
Write to us with the account and the time. Include no keys or seed phrases.