The Tribot Trade operates as a non-custodial service. Your Tribot Trade account enables you to initiate and coordinate actions on your linked exchange accounts. However, it's important to note that you cannot withdraw funds either directly from Tribot Trade or through Tribot Trade.
Tribot Trade establishes connections with your exchange accounts through the use of API keys. We have implemented a robust security framework around API connections, offering three crucial layers of security measures that vary depending on the exchange you use:
Sign Center
The Sign Center serves as a highly secure API key repository, isolated at both the infrastructure and access levels to safeguard the integrity of our systems. When Tribot Trade initiates a trade request with an exchange, our servers instruct the Sign Center to digitally sign the transaction. This protocol closely resembles how Metamask or Ledger signs a transaction.
When you generate an API key with your exchange, you have the option to specify an IP whitelist. This whitelist enables you to restrict the API key's usage to specific IP addresses. You can employ this tool to explicitly authorize official Tribot Trade IP addresses while blocking access from any others. Importantly, an API key you create cannot be linked to any other account on Tribot Trade, ensuring it cannot be utilized to initiate trades with your exchange account unless the request originates from your Tribot Trade account.
Fast Connect
Some exchanges, with a focus on enhancing user experience, offer a feature known as Fast Connect. Fast Connect streamlines the process of granting specific account permissions, creating API keys, and seamlessly linking to third-party API integration platforms.
Fast Connect enables you to log in to your exchange account through the convenient 'quick connect' function on the Tribot Trade. It can automatically generate API keys and associate them with our platform, allowing you to begin using Tribot Trade services without the need for manual API key creation.
Transactional access only
Our system exclusively instructs your exchange account to open and close trading positions. It maintains zero access to initiate withdrawals or transfers of fiat or cryptocurrencies. Importantly, your exchange login credentials remain confidential and are never disclosed to our system. There is no backdoor or cache that can be exploited because our API intentionally lacks the capability to request any of your personal information from the exchange.
On top of using the three key secure connection protocols explained above, Tribot Trade secures user data with tools from security services provider, including:
- Web Application Firewall
- DDOS attack protection
- SSL/TLS encryption between visitors and origin servers
1. When working with an exchange:
- Secure your exchange account with two-factor authentication (2FA).
- Save 2FA backup keys in a safe place.
- Use a strong and unique password/email for your exchange account.
- Don’t store secure API keys in a shared or accessible document.
- Don’t send your API keys via a message to yourself or anyone.
- Use separate API keys for different services.
- Connect exchange via Fast Connect if possible.
- Always be wary of phishing emails and ensure the authenticity of the sender — especially check those from your exchange providers.
- Set up alerts, like the one Tribot Trade Premium subscribers use on Binance that can send them messages any time there's an external trade.
2. When creating an account on Tribot Trade:
- Use an email address you are checking regularly (not a “spam address”)
- Use a strong and unique password different from your email address.
- Verify your email address (you will receive a link once you are registered).
- Enable 2FA for your account in Settings.
3. When using Tribot Trade:
- Hide your balance when you are sharing screenshots or your interface is viewable by others.
- Log out from Tribot Trade if you are giving access to your device to anyone else.
- Secure your device with a password or PIN, and don’t leave it unlocked.
- Don’t share your email_token in TradingView commands.
4. When working with mobile devices:
- Secure your smartphone with a PIN code or biometric measure.
- Never give your device to anyone while the trading app is opened or when your Google Authenticator app is accessible.
- Always ensure that your backup codes are retrievable in the event your phone is lost or stolen.
At Tribot Trade, we place an utmost priority on the security of our platform and user data. Given the alluring nature of blockchain and cryptocurrency services as potential targets for malicious attacks, we maintain a constant vigilance, assuming that malevolent actors may continuously attempt to compromise our platform and the community it caters to.
The security measures and protocols elucidated on this page reflect our ever-evolving commitment to thwart those who may try to exploit our customers, ensuring that we provide you with the highest level of security and protection possible.
The Tribot Trade operates as a non-custodial service. Your Tribot Trade account enables you to initiate and coordinate actions on your linked exchange accounts. However, it's important to note that you cannot withdraw funds either directly from Tribot Trade or through Tribot Trade.
Tribot Trade establishes connections with your exchange accounts through the use of API keys. We have implemented a robust security framework around API connections, offering three crucial layers of security measures that vary depending on the exchange you use:
Sign Center
The Sign Center serves as a highly secure API key repository, isolated at both the infrastructure and access levels to safeguard the integrity of our systems. When Tribot Trade initiates a trade request with an exchange, our servers instruct the Sign Center to digitally sign the transaction. This protocol closely resembles how Metamask or Ledger signs a transaction.
When you generate an API key with your exchange, you have the option to specify an IP whitelist. This whitelist enables you to restrict the API key's usage to specific IP addresses. You can employ this tool to explicitly authorize official Tribot Trade IP addresses while blocking access from any others. Importantly, an API key you create cannot be linked to any other account on Tribot Trade, ensuring it cannot be utilized to initiate trades with your exchange account unless the request originates from your Tribot Trade account.
Fast Connect
Some exchanges, with a focus on enhancing user experience, offer a feature known as Fast Connect. Fast Connect streamlines the process of granting specific account permissions, creating API keys, and seamlessly linking to third-party API integration platforms.
Fast Connect enables you to log in to your exchange account through the convenient 'quick connect' function on the Tribot Trade. It can automatically generate API keys and associate them with our platform, allowing you to begin using Tribot Trade services without the need for manual API key creation.
Transactional access only
Our system exclusively instructs your exchange account to open and close trading positions. It maintains zero access to initiate withdrawals or transfers of fiat or cryptocurrencies. Importantly, your exchange login credentials remain confidential and are never disclosed to our system. There is no backdoor or cache that can be exploited because our API intentionally lacks the capability to request any of your personal information from the exchange.
On top of using the three key secure connection protocols explained above, Tribot Trade secures user data with tools from security services provider, including:
- Web Application Firewall
- DDOS attack protection
- SSL/TLS encryption between visitors and origin servers
1. When working with an exchange:
- Secure your exchange account with two-factor authentication (2FA).
- Save 2FA backup keys in a safe place.
- Use a strong and unique password/email for your exchange account.
- Don’t store secure API keys in a shared or accessible document.
- Don’t send your API keys via a message to yourself or anyone.
- Use separate API keys for different services.
- Connect exchange via Fast Connect if possible.
- Always be wary of phishing emails and ensure the authenticity of the sender — especially check those from your exchange providers.
- Set up alerts, like the one Tribot Trade Premium subscribers use on Binance that can send them messages any time there's an external trade.
2. When creating an account on Tribot Trade:
- Use an email address you are checking regularly (not a “spam address”)
- Use a strong and unique password different from your email address.
- Verify your email address (you will receive a link once you are registered).
- Enable 2FA for your account in Settings.
3. When using Tribot Trade:
- Hide your balance when you are sharing screenshots or your interface is viewable by others.
- Log out from Tribot Trade if you are giving access to your device to anyone else.
- Secure your device with a password or PIN, and don’t leave it unlocked.
- Don’t share your email_token in TradingView commands.
4. When working with mobile devices:
- Secure your smartphone with a PIN code or biometric measure.
- Never give your device to anyone while the trading app is opened or when your Google Authenticator app is accessible.
- Always ensure that your backup codes are retrievable in the event your phone is lost or stolen.
At Tribot Trade, we place an utmost priority on the security of our platform and user data. Given the alluring nature of blockchain and cryptocurrency services as potential targets for malicious attacks, we maintain a constant vigilance, assuming that malevolent actors may continuously attempt to compromise our platform and the community it caters to.
The security measures and protocols elucidated on this page reflect our ever-evolving commitment to thwart those who may try to exploit our customers, ensuring that we provide you with the highest level of security and protection possible.