Security

Non-custodial by design

Orbafin has no deposit address and no balance of yours. Money goes from your wallet to your own Hyperliquid account (through Hyperliquid's bridge) and back out through Hyperliquid. There is nothing on Orbafin's side to hack, freeze or lose.

The trade-only key

Hyperliquid lets an account authorise an agent: a separate key that may place and cancel orders for that account and nothing else. It cannot withdraw, transfer, or change who controls the account. This is the only power Orbafin ever has.

• For your own trades, the key is created in your browser and stays there (named Orbafin Trading). Orders you place are signed on your device; Orbafin's servers never see that key.
• For copies, a key is created when you start the copy and stored encrypted (AES-GCM) so the copy engine can place trades while you are away. A key that cannot be read with the current secret is never used; such a copy is retired and shown to you with the reason.
• You approve each key with one wallet signature; the approval screen shows exactly what it allows.

The fee approval is a cap

The 0.025% fee is a Hyperliquid builder fee you approve once, as a maximum. Hyperliquid rejects any order that tries to charge more. Orbafin cannot raise it without you signing again.

What you sign, and what you never do

• Sign-in: a free message proving the wallet is yours, valid for 7 days in one browser. It moves nothing.
• Approvals: the trade-only key and the fee cap, both on Hyperliquid, both free.
• Deposit: the only real transaction, from your wallet to Hyperliquid's bridge, with an amount you type.
• Orbafin never asks for your recovery phrase, your wallet password, or a transfer to any address of its own. Anyone who does is not Orbafin.

Every approval first opens a security breakdown that names the contract, the chain and the permission, with a Confirm & Open Wallet step, so nothing is signed by surprise.

Revoking

Open Permissions on the Trade page to see every Orbafin key and whether the fee is approved; the Revoke button there opens Hyperliquid's API-wallet settings, where any key is removed in one step. The fee approval can be lowered or removed on Hyperliquid as well. Once a key is removed, no trade can be placed; a running copy stops with the reason shown. Stopping a copy from Orbafin can close its trades first if you choose so.

The engine

The copy engine runs on a dedicated server, speaks to the website over signed, token-protected calls, and keeps a book per copy so one copy can never close another's trades or yours. Its health is monitored; if it cannot read keys or Hyperliquid rejects the fee, an alert is raised and the affected copies are retired rather than left half-running.

What Orbafin cannot protect you from

• Losing trades. See the risk disclosure.
• A compromised wallet or recovery phrase on your side.
• An outage or exploit of Hyperliquid itself, which affects every account on it.
• Fake sites that imitate Orbafin. Check the address is orbafin.com and that the security breakdown appears before every signature.

Verify it yourself

The badge below is computed from the live code's treasury address and fee cap, the same ones every approval is checked against.

Found something? Write to support@orbafin.com.