security

non-custodial · security · education

After every exchange collapse, the same lesson gets re-learned at terrible expense: the risk wasn't the trading, it was the custody. 'Non-custodial' automation means your capital never leaves your own exchange account — and knowing how to verify that claim is the first skill of automated trading.

The Fluxy Team · 31 Aug 2026

security · api-keys · exchanges

The single most important checkbox in automated trading is the one you leave unticked: withdrawals. A properly scoped API key lets a bot trade your account but never move a coin out of it — which converts the worst case from 'funds gone' to 'bad trades you can see and stop.'

The Fluxy Team · 31 Aug 2026

security · sandbox · platform

A platform that lets users write Python and run it on your infrastructure has a hard problem: that Python could try to escape. Here's the layered sandbox — save-time AST validation, restricted builtins, an allowlisted importer — that lets quants write real code without handing them the keys to the monorepo.

The Fluxy Team · 18 Jul 2026

security · exchanges · api-keys

Connecting a fund to an exchange means handing over API keys that can move money. Store them wrong and one breach empties every account. Our account layer encrypts every secret at rest, decrypts only at the moment of execution, and syncs live balances and positions into a unified portfolio view — so you can connect Binance, KuCoin, Hyperliquid, Bybit, Bitstamp, and Interactive Brokers without ever exposing a key.

The Fluxy Team · 26 Jul 2026