Security
Your money never leaves your own Hyperliquid account. Crest can trade for you. It can never withdraw.
- Place and cancel orders
- Move money in and out of the funding trade
- Send funds to anyone
- Withdraw to a wallet
No contract and no vault to deposit into, so nothing of ours to audit.
Your money stays in your account, in the funding trade or backing a position.
Your wallet's. Transfers and withdrawals need its own signature.
Where your money sits
Crest isn't in this picture. There is no Crest contract or vault for your money to pass through.
Hyperliquid's API settings
The key is yours to cancel. Remove it there and it can't sign anything again.
Anyone with access to this browser could trade with the key, so revoke it if the device goes missing. They still couldn't move funds out: that takes your wallet.
A small move can liquidate a position. Funding can turn against you. Hyperliquid is one chain.
Crest adds no contracts, so the risks are Hyperliquid's and the market's. The front-end itself hasn't been independently reviewed. Read the risks.