Security model

Your coins, your venue, our discipline.

LeverLock does not custody BTC in a commingled wallet. Funds sit in a segregated subaccount opened in your name at a reputable derivatives venue. We connect via withdraw-disabled API keys that can only execute the specific strategy you have authorized.

Segregated subaccounts

One subaccount per LeverLock client at the venue. No commingling.

Withdraw-disabled API keys

Our keys cannot send your BTC anywhere. Withdrawals are user-initiated and address-whitelisted.

Server-side secret store

API keys live in an encrypted secret store, never in the database, never in browser code.

BTC-denominated reporting

Balance, PnL, fees, high-water mark — all in BTC. No stablecoin sleight-of-hand.

Pre-trade risk math

Every strategy launch computes effective leverage and liquidation price before any order is placed; both are shown to you.