Custody and security
Two questions matter more than any other in a product like this: who can move my money, and what am I authorizing when I sign. Both have exact answers.
Noncustodial, concretely
Section titled “Noncustodial, concretely”Your funds sit in your own wallet on Hyperliquid. Rubick never holds them, and you can reach the account directly, without us, at any time. See the failsafe.
Signing in
Section titled “Signing in”Sign in with an external wallet, MetaMask or another major wallet, or with Google, through Privy. Sign in asks for two signatures, and each one is explained in plain language so you know exactly what it authorizes before you sign. Sessions last 7 days.
The agent key model
Section titled “The agent key model”Trading runs through an agent key that can only trade. It cannot withdraw, and it cannot change where money goes. Withdrawals are signed by your master key alone, to your own wallet alone.
That is the whole custody model in one line: Rubick cannot move your funds, and neither can a compromised agent key.
Approvals you can read
Section titled “Approvals you can read”Agent approvals are consolidated into one notice, with tap to approve and consent receipts, so what you agreed to is recorded where you can see it rather than scattered across prompts.
Key status, always visible
Section titled “Key status, always visible”Your trading key status shows as a pill in settings, so you always know whether your key is current. If it needs fixing, you can do that directly from the trade screen too.
Exporting your private key
Section titled “Exporting your private key”Private key export is gated behind your PIN plus a fresh login. Nobody who picks up an unattended session can walk away with the key.