Your funds, your control

Engine never takes possession of your funds. They live in your Hyperliquid vault, under your wallet, the entire time you use the product. The worst thing that can happen between you and us is that you stop using Engine.

The agent's permission is narrow

When you go live, you sign a single permission at Hyperliquid that lets the agent place trades from your vault, and nothing else. It can't withdraw your funds. It can't move them anywhere. It can't sign anything off-Hyperliquid.

The permission is enforced by Hyperliquid, not by us. Even in a worst case where our infrastructure were fully compromised, the most an attacker could do is place trades inside the rules of your own strategy. They couldn't pull a dollar out.

You can revoke any time

Two ways to walk away:

• From Engine. Pause the agent, then revoke its permission in settings. Done.
• From Hyperliquid. If you ever lose access to Engine for any reason, sign in to Hyperliquid with your wallet and revoke the permission from your vault. You don't need us for this. That's the point.

Open positions stay where they are when you revoke. The agent simply stops opening new ones. Manage them yourself at Hyperliquid whenever you're ready.

If Engine disappears

If we go offline, get acquired, shut down, or get pwned: your funds are still in your vault, still under your wallet. Withdraw, manage positions manually, hand the keys to a different agent. Nothing about your custody depends on us continuing to exist.

We'd rather be the kind of product you can stop using than the kind you can't.