Security Level: Enterprise-Grade
Can They Steal My Money?
The short answer is No, provided you follow the 2026 API Hardening Protocol.
The Non-Custodial Safeguard
WaveBot is a non-custodial execution engine. Your capital stays in your exchange (Binance/ByBit). The software only has permission to trade, not to withdraw. This is the ultimate defense against internal rug-pulls or company insolvency.
Mandatory API Settings:
- ✔ Enable Spot & Margin Trading
- ✖ Disable Withdrawals (Crucial)
- ✔ Enable IP Whitelisting
By utilizing IP Whitelisting, your exchange will only accept commands from specific, trusted WaveBot servers. This means even if your API keys were leaked, they would be unusable from any other computer on earth.