What you own
Open positions, agent sub-wallets, cashback, ERC-20 tokens, running PnL. One dashboard. Keys encrypted at rest, exportable to MetaMask anytime.
What you see
Open positions
Active trades from your trading-mode pipelines. Entry price, current price, PnL, TP and SL status
Agent balances
Each agent runs with its own sub-wallet. Balance, allocation, live trades, and a pause button all on one row
Cashback ledger
The 25% that comes back per signal, shown as a running total with per-agent breakdown and anti-farm gate status
ERC-20 tokens
Real Ethereum tokens you received when agents graduated. These sit in your main platform wallet
Profit and loss
Net credits spent on signals, plus trade PnL, plus token market value. Updated on every block
Export your key
Hit Export in Settings to pull the 32-byte private key (hex). Import it into MetaMask or Rabby and you own the wallet outright
Custody, explained honestly
The platform is custodial: when you sign up we generate a Ethereum wallet for you and store the private key encrypted at rest in our infrastructure. That's what lets autonomous agents and copy-trade fire while you're offline — without it the whole product premise doesn't work. We're upfront about the trade-off: you can export the raw key to MetaMask at any moment and take full self-custody if that matters more than automation.
Generated server-side, encrypted at rest
The private key is created on our backend and immediately encrypted with AES-256-GCM. The master encryption key lives in SOPS-managed secrets, separate from the application code path
Platform signs on your behalf
For every trade we decrypt your key in memory just long enough to sign the transaction, then zero the buffer. This is what lets a Copy Trader react to a whale move in 200ms without you being online
You can leave with the key
Settings → Export Private Key returns the 32-byte key as hex. Import it into MetaMask or Rabby. Your wallet now exists outside the platform, fully self-custodial
If we go dark, your funds remain
Export your key while the platform is up. Once you have the raw bytes, your wallet exists on-chain forever — independent of our infrastructure, no migration needed
Common questions
Can Apevisor take my funds?+
We're a custodial platform — technically yes, the keys we encrypt could be decrypted by us. The defenses are operational, not cryptographic: master encryption key kept in SOPS-managed secrets, withdrawals require your in-app authorization, and most importantly, you can export the key to MetaMask at any moment to get out of the trust relationship entirely. If you're holding meaningful size, export and self-custody is the right move.
What happens if the platform shuts down?+
Export your private key while we're up — Settings → Export Private Key. Once you have the raw 64-byte key in MetaMask, your wallet is independent of our infrastructure. The ETH, the $APE, and any ERC-20 tokens earned through graduation all live on-chain forever. No migration sprint needed if you've already exported.
Why not just use MetaMask directly?+
Because autonomous agents need to sign transactions while you sleep. MetaMask requires a manual click each time. A custodial wallet lets the platform sign on your behalf so a Copy Trader can react to a whale move in 200ms without you being at the keyboard. If you prefer manual, connect MetaMask for the main trading UI — we support both, and you can run agents on the platform wallet while doing manual swaps from MetaMask.
Each agent has its own wallet?+
Yes. Every trading agent runs on a dedicated sub-wallet so its PnL is clean and its blast radius is capped. You top up that sub-wallet explicitly. If the agent goes sideways, the worst-case loss is whatever you allocated. Main wallet untouched.
Is my email the weakest link?+
Enable a passkey or 2FA on the email itself — that's the meaningful upgrade. If your inbox is compromised, an attacker can reset your platform password and authorize withdrawals from your wallet. Hardware-key 2FA on the email blocks that path. The platform itself does not store the email password and cannot bypass your auth provider.