Nothing to steal · Handing over your keys
Safe crypto trading tools need nothing you can lose.
Copy bots ask for exchange API keys, fake "connect" buttons ask for approvals, and signal apps ask for deposits. SuperQuant needs none of it.
- 01Notice
- 02Check
- 03Test
- 04Size & practice
- 05Review
- Foundations
- Learn the mechanics
- Nothing to steal
Safe crypto trading tools are the ones that ask for as little as possible. Many ask for more than they need: exchange keys with trading rights, wallet approvals, deposits. Each is a way to lose money on a trade you never made. SuperQuant is designed so it never needs any of them.
What it looks like
Every key you hand over is a way to lose money you didn't trade.
- Exchange keys with trading rights can be abused if they leak.
- A "connect wallet" prompt can ask for approvals that move funds.
- Your strategies and journal end up on someone else's server.
- CopyBotPaste your API key + secret to start copy trading 🔑
- AirdropApprove this transaction to verify your wallet
- VIP SignalsDeposit 0.5 SOL to unlock premium calls
- "Support"Enter your seed phrase to sync your account
Every one of these can cost you money
Why it happens
Why handing things over is the real risk
- KeysKeys are powerA key that can trade can be used against you if it leaks.
- ApprovalsOne click can drainApproving a transaction is not the same as proving you own a wallet.
- DataYour work is yoursStrategies and journals are personal; they shouldn't become someone else's dataset.
In depth
Where trading tools put your money at risk
Copy-trading bots and automated tools often need exchange API keys. If a key with trading or withdrawal rights leaks, through a breached service or a phishing page, someone else can trade or move your funds. Even read-only keys reveal balances and history.
On-chain, the risk is approvals. A genuine ownership check asks you to sign a message; a malicious one asks you to approve a transaction or token allowance that can move assets later. A request for your seed phrase is never legitimate.
In depth
How SuperQuant avoids those risks
SuperQuant has no exchange connection at all, so there are no exchange keys to store or leak, and every trade in the app is simulated. Access is checked by reading the public balance of a linked Jupiter Wallet after you sign a short message; nothing is sent and no funds move.
Research data stays with you: strategies, backtests and your journal live in your browser, and encrypted backups use a passphrase only you know. Pro whale features that watch your own Hyperliquid address store it encrypted and only read it.
Worked example
Worked example: a 60-second safety check for any trading tool
Questions to ask before you connect anything.
| Wants exchange API keys with trading rights? | Caution: only if you need automation, and never with withdrawal rights |
|---|---|
| Wants you to approve a transaction to "verify"? | Red flag: verification needs only a signed message |
| Wants your seed phrase? | Always a scam |
| Wants a deposit to unlock features? | Treat with suspicion |
| Where is your data stored? | Prefer your own device or encryption you control |
SuperQuant asks for none of these: no keys, no approvals, no seed phrase and no deposits.
Before and after
What changes with SuperQuant
| Without SuperQuant | With SuperQuant |
|---|---|
| Exchange API keys with trading rights | No exchange connection at all |
| "Approve this transaction" | A short signed message to read balances |
| Deposits to unlock features | Access from $STONKB or staked JUP held in your own wallet |
| Your journal on someone else's server | Private in your browser; encrypted backups optional |
The SuperQuant solution
Built so there is nothing to steal.
SuperQuant is research and education software. It can't trade, it can't move funds, and your work stays with you.
/whales me · ProYour Hyperliquid address is stored encrypted and only read, never used to act.Step by step
How access works
- Create an accountEmail, or Telegram sign-in once linked.
- Link TelegramStarts a 7-day trial of the full workspace.
- Keep access with a walletHold $50 of $STONKB or stake 1,000 JUP in a linked Jupiter Wallet. Holdings are read, never moved.
- Back up if you wantEncrypted with your own passphrase, or not at all.
- ✕Exchange API keysNever
- ✕Seed phrase or private keyNever
- ✕Deposits or transaction approvalsNever
- ✓A short signed messageTo read wallet holdings
- ✓Your email or TelegramTo sign in
Ledger users sign a memo-only transaction that is never sent
No hype
What SuperQuant is, and what it is not
It does
- Reads public on-chain balances to check access
- Stores encrypted backups only if you choose
- Lets you export your workspace or delete your account
It won't
- Hold your funds
- Place trades on any exchange
- Give investment advice
SuperQuant is research and education software. It never places trades and is not financial advice. Trading perpetual futures carries a high risk of loss.
FAQ
Questions people ask
Can SuperQuant move my funds?
No. Linking a wallet means signing a short message that proves ownership; nothing is sent and no funds move. Ledger users sign a memo-only transaction that is never sent.
Why does access use a wallet instead of a subscription?
Access comes from holding $50 of $STONKB or staking 1,000 JUP in a linked Jupiter Wallet, so there is no card on file and no recurring charge. The Academy, Learn and the free tools need no wallet at all.
What happens to my data if access pauses?
Nothing is deleted. Your workspace stays in your browser and in any encrypted backups you made, and you continue when access returns.
Is it safe to give a trading bot my API key?
Only with the narrowest permissions it needs, never withdrawal rights, and ideally with an IP allowlist. Better still, use research tools that need no keys at all; SuperQuant never asks for them.
Learn
Further reading
Free, source-cited guides from the SuperQuant Learn library.
Know the odds before you take the trade.
Research without handing anything over.
Start free. Your keys, your funds and your journal stay yours.