Security

How Anubis Trade protects your keys, your money and your downloads. Applies to the Windows app v0.3.4.

Short version: Anubis Trade runs on your computer. Your keys are encrypted there and never sent to us. New bots start in paper mode with fake money, hard limits are checked before every order, and a kill switch stops everything in one click.

Your keys stay on your device

Wallet keys and exchange API keys are stored only in the app's data folder on your computer. They are never sent to us; Anubis Trade has no server that holds your keys or your funds.
Once you set a passphrase, keys and app data are encrypted (AES-256-GCM, with a key derived from your passphrase using scrypt). On Windows they are also locked to your Windows account (DPAPI), so a copied folder is useless on another PC.
The app checks every outgoing request and refuses to send anything that contains key material. Logs and support bundles are scrubbed of secrets.
The app auto-locks after inactivity (15 minutes by default). Your passphrase is needed again to go live, export a wallet backup or change keys. Private keys are never shown on screen.
Exchange API keys only need View + Trade. Before going live the app checks for withdrawal permission where the exchange allows it and refuses keys that can withdraw.

Connecting your wallet

Wallets connect through standard wallet connections: the Solana Wallet Standard, EVM browser wallets (MetaMask, Rabby and others) and WalletConnect. Supported: Phantom, Solflare, Backpack, Glow, Coinbase Wallet, Trust, Ledger, MetaMask, Rabby and WalletConnect.
The app only stores your public address. It never asks for or stores your recovery phrase or private key.
To prove the wallet is yours, you approve a one-time sign-in message inside your own wallet. Every signature happens in your wallet, not in Anubis Trade.
In v0.3.4, connected wallets are used for balances and paper mode. Live trading uses a dedicated trading wallet or exchange key that is encrypted on your PC.

Paper mode first

Every new bot starts in paper mode. It trades fake money with simulated fills from live order books, so you can watch it work before any real money moves. Switching to live needs your passphrase and an explicit confirmation in Settings — the chat can't do it.

Kill switch and limits

Kill switch: one click stops every strategy at once. You can also trigger it from the chat ("stop everything"), and it always works instantly — even with an empty fee balance.
Spending and loss limits: a total budget, a maximum per trade, a required daily loss stop and slippage caps are checked before every order. They can't be turned off, and the chat can't raise them past the safety floors.
Live buys and sells requested in chat need a confirm tap from you.

Fees

The app is free. Anubis Trade's only fee is 1% per trade (0.5% with Pro). Paper trades are never charged. Exchanges and blockchains charge their own trading and network fees, as they would without the app.

This website

anubistrack.com is served only over HTTPS, with HSTS.
Every page sends strict security headers: a Content Security Policy that blocks inline and third-party scripts, plus frame blocking (X-Frame-Options: DENY), nosniff, a strict referrer policy and a restrictive permissions policy.
The site has no accounts, no logins and no trackers. The price ticker reads public Coinbase market data.

Check your download

Each download comes with a SHA-256 checksum. For the v0.3.4 Windows installer (AnubisTrade-Setup-x64.exe) it is:

c5dd147bd57ac5761ccb3f41dffce4b9586d73be23e0f4db4b8e667901d8c186

In PowerShell run Get-FileHash .\AnubisTrade-Setup-x64.exe and check that the result matches. The installer isn't code-signed yet, so Windows SmartScreen may show a warning. Update notices are signed (Ed25519), and the app never downloads or installs updates by itself.

Report a problem

Found a security issue or something that looks wrong? Email [email protected] with the app version (Help → About), the steps to reproduce it and what happened. Please don't publish details until a fix is out.

Risk

Crypto trading is risky and you can lose money, including all of the funds you trade with. Security features reduce some risks but can't remove them, and nothing here is a guarantee or financial advice. Keep your PC free of malware, use a long unique passphrase and only trade what you can afford to lose.