Security

Built so that a mistake cannot cost you your account

4wick never needs to withdraw, so it never asks for keys that can. Everything else follows from that.

Trade-only keys
4wick asks for exchange keys that can trade but cannot withdraw. A Binance key that can withdraw or transfer is refused for trading; a Hyperliquid API wallet cannot withdraw by design.
Encrypted at rest
Exchange keys are encrypted with a key pair whose private half only the trading engine holds; the website and its API can store a key but never read it back.
Two-factor and confirmation
Two-factor authentication is required for live trading, and sensitive actions ask you to confirm with your password and code.
Private workspaces
Your accounts, keys, strategies, trades and settings belong to your workspace alone. Other users never see them.
Every action recorded
Sign-ins, setting changes and trading decisions go to an audit log with a tamper check, which you can read in the dashboard.
Protection that survives an outage
Stop-loss orders live on the exchange, not on our server, so an outage of 4wick never leaves a trade unprotected.

What you stay in charge of

Your exchange account and its keys: revoke a key on the exchange at any time and 4wick can no longer trade with it.
When it trades: every account starts paused, in Paper mode; Pause and Emergency stop work from any page and from Telegram.
How much it may risk: position size, leverage, stop-loss, daily trade limits and open positions are your settings, under server-wide hard limits.

Found a security problem? Please tell us through the Report page.

Create your account in a minute. Nothing trades until you connect an exchange and press Resume.