AM

How your money stays yours

We built 3AM assuming someone will try. Here's every layer that keeps your money yours, in plain words: what's live today, and what's coming next.

Last updated 31 October 2026

The layers between your money and everyone else

  1. Your moneyIn placeStays in your own Hyperliquid account. We can’t withdraw it.
  2. Your trading keyIn placePlaces trades only, never withdraws, and is locked in your browser before it’s sent.
  3. Our serversIn placeKey logins only. The bots run under an account that can only start and stop bots.
  4. This websiteIn placeThe key your trading key is locked to is built into our code.
  5. The vaultComingA separate, locked-down server that will sign only our bots’ normal orders.

At a glance

  • Your money stays in your own Hyperliquid account. We can’t withdraw it.
  • Even if our servers were hacked, nobody could withdraw your money through 3AM: our keys can’t.
  • The trading key can place trades only, expires in 179 days, and you can revoke it any time.
  • It’s locked in your browser before it’s sent. The website never sees it.
  • Risk caps, daily loss limits and a kill switch that stops every bot within seconds.
  • We never message you first or ask for your seed phrase.

How other platforms got hacked, and what we do instead

3Commas, 2022

What happened

Leaked trade-only keys were used to force bad trades, about $27 million in all.

At 3AM

Your key is locked in your browser before it’s sent, and the website can’t read the keys our bot runner holds. The vault below takes it further.

Bybit, 2025

What happened

Attackers changed the wallet website Bybit’s team used, so they approved the wrong transaction, about $1.5 billion according to the FBI.

At 3AM

The key your browser locks your trading key to is built into our code, and below is the short list of the only things we’ll ever ask you to sign.

Exchange hacks

What happened

When a platform holds your money, a hack of the platform takes it.

At 3AM

We never hold it: it stays in your own Hyperliquid account.

Coming next: the vault

Not live yet

A separate, locked-down server that will hold the trading keys, so our main server never touches them. It will sign only the orders our bots normally send, on our coins, within your own size and leverage limits. Anything else is refused and alerts us, and if several accounts look wrong at once, everything freezes. It’s built and tested, and it’s rolling out in stages. We’ll update this page the day it’s live.

Check it yourself

  • Every fill our bots make is on Hyperliquid for anyone to see.
  • The pad lists every trading key approved on your account, read straight from Hyperliquid, and flags any that isn’t ours.
  • Revoke our key on Hyperliquid’s API page any time, and nothing can trade for you.

Your funds never move

They stay in your Hyperliquid account the whole time. There’s no deposit to 3AM and nothing for us to withdraw.

The trading key

  • It’s created in your browser, then your wallet approves it on Hyperliquid with one signature.
  • Hyperliquid lets it place and cancel orders. It can’t withdraw or send funds anywhere.
  • It expires after 179 days. Remove it here, or revoke it on Hyperliquid’s API page, any time.

How we keep it

  • Your browser locks the key before sending it, so the website itself never sees it.
  • Only the bot runner, a separate program on a separate account, can unlock it, and only to start your bot.
  • It’s never logged or shown, and it’s only handed to your bot when live trading is on.

What a trade-only key can still do

Place trades. If it were ever stolen it couldn’t take your money, but it could trade badly. That’s why risk per trade is capped (3% for Momentum, 10% for Break Retest, and anything above 1% needs your confirmation), each bot stops after its daily loss limit, and we can pause every bot at once.

Safety switches

  • Practice mode: your bot runs on your real account data without placing orders.
  • One bot per coin per account, so two bots never close each other’s trades.
  • A kill switch that stops every bot within seconds. Open trades keep their stop on Hyperliquid.

Why the key is locked before it leaves your browser

In December 2022, about $27 million was taken from 86 users of the 3Commas bot platform without a single withdrawal. Their trade-only API keys leaked, and the attackers used them to make victims’ accounts buy thinly traded coins at inflated prices from the attackers’ own accounts (3Commas confirmed the leak).

A trade-only key is safe from withdrawals, not from bad trades. That’s why your key is locked in your browser before it’s sent, the website never sees it, and only the bot runner, on a separate account, can unlock it.

We’ll never ask for your seed phrase

3AM will never message you first, ask for your seed phrase or private key, or ask you to send money anywhere. Anyone who does isn’t us. Our only accounts are the ones linked at the bottom of every page.

The only things 3AM asks you to sign

  • Signing in: a free message that proves the wallet is yours. It can’t move anything.
  • Your trading key: your wallet shows “Approve agent” named “3AM pad”. The key can place and cancel orders, never withdraw.
  • Moving USDC from Spot to Perps, only if a deposit landed in Spot. It stays in your own account.
  • Switching your account to standard mode, only if it’s in unified mode. No money moves.
  • A deposit you start yourself in the deposit box: your ETH or USDC goes through LI.FI, or straight to Hyperliquid’s bridge, into your own Hyperliquid account. USDC may first ask you to approve that amount.
  • Linking Phantom: a free message, only if you’re asked to link a Solana wallet.

3AM will never ask you to sign a withdrawal, or to send money anywhere but your own Hyperliquid account. If your wallet shows one, reject it: the site is fake or hacked.

If 3AM ever stops

  • Your money stays in your Hyperliquid account, and you can withdraw it on Hyperliquid as always.
  • Any open trade keeps its stop on Hyperliquid.
  • Revoke the key on Hyperliquid’s API page and nothing can trade for you.

Our servers

  • Key logins only, no passwords, and we check them for new logins and newly opened ports.
  • The bots run under an account that can only start and stop bots. Changing anything else on the server takes a separate admin login with its own key and password.
  • The bot runner and the website run as separate accounts, so the website can’t read the runner’s keys.

This website

  • The key your browser locks your trading key to is built into the site’s code. If a server ever offered a different one, the site stops before you sign anything.
  • The chart runs in a sealed frame, so none of TradingView’s code runs on our page.
  • Scripts load only from our own site, plus Cloudflare’s visitor counter.

If something goes wrong

We pause trading first, tell you what happened within hours, and publish the details. Our own bots trade real money in public: every fill is on Hyperliquid for anyone to check.