Home / Security
Security & permissions
Your funds stay in your own Lighter account; Robindex does not custody funds. Enabling trading registers a trading key on your Lighter account. Below is exactly what that key can and cannot do.
Trading key permissions
| Capability | Allowed |
|---|---|
| Place, modify and cancel orders | Yes |
| Transfer funds between your own accounts | Yes |
| Withdraw back to your own wallet | Yes — and Robindex asks your wallet to confirm every withdrawal |
| Send funds to any address other than your own wallet without your wallet signature | No |
| Send funds to another person | No |
| Approve new fee collectors | No |
Isolation
| Trading bots | Live. Each bot runs in its own isolated sub-account, separate from your main account. |
| Key storage | The server-side copy of your trading key is encrypted; the browser copy lives in your browser. |
| Revocation | Revoke or rotate the API key in your Lighter account. Robindex does not yet provide a revocation screen; submitted orders may remain active. |
Risks
Perpetual futures are leveraged instruments: losses can exceed deposits on the position level. Review venue fees, funding and liquidation rules before trading. Availability may vary by region.