Skip to main content

We don't custody your funds

Why your money never leaves Kraken, and what that means for you.

How the model works

Your money stays in your Kraken account. We never receive your USD, your BTC, or anything else. The bot uses your Kraken API keys to place orders against your Kraken account — Kraken executes the trades, Kraken settles them, Kraken holds the resulting positions.

What this means for you

If our service is hacked, you don't lose money.
The worst an attacker on our side could do (with stolen master keys + DB access) is place orders on your behalf using your Kraken keys. The keys we issue lack withdrawal permission (see Kraken API keys), so funds can't be moved off Kraken.
If we go bankrupt, your funds are safe.
There's no "VolatilityFarmer-controlled wallet" or pool of customer assets. Your Kraken account is yours, governed by your Kraken agreement.
If our servers go offline, your funds are safe.
Pending orders we placed are on Kraken's books — they'll execute or expire per Kraken's normal handling. Our outage doesn't move money.
You can leave any time.
Delete your API key on Kraken's side; we lose the ability to place orders within minutes. No "withdrawal request" form; no waiting period from us.

What this does NOT mean

Non-custody doesn't mean risk-free. The risks you still have:

  • Trading losses. The bot can lose money in bad market conditions. That's a market risk, not a custody risk.
  • Kraken outages. If Kraken goes down or freezes withdrawals, your funds are stuck there, not with us.
  • Kraken account compromise. If someone steals your Kraken login (not your API keys via us — your direct Kraken access), they can withdraw your funds. That's a Kraken account-security issue.
  • API key theft would let an attacker place orders on your behalf, but not withdraw funds (because the key we ask you to issue can't withdraw).

Why we chose this model

Custody adds enormous regulatory + operational burden (licensing, KYC, insurance, audits). For a small operator, custodial models are an unnecessary risk for both us and our customers. By staying purely a "bring your own Kraken account" service, we keep the trust boundary clean: you trust Kraken with custody, you trust us with strategy execution.