Learn — the Academy →Swap Engine →Nodes & Signals →Games →Ecosystem Resources →Launch Your Token →Token Packages →Rewards →Help — Knowledge Base →Contact →Log in →Create account
Read this before you trust anyone with automation.
This page exists because you SHOULD be skeptical. Every trading service in history has asked for your money first — and history is what happened next. COMPASS Nodes are engineered so that trust is never the product: the architecture itself removes the ability to take your funds. Here is exactly how, in plain language, with nothing skipped.
The problem we refused to inherit
The graveyard of this industry is not full of bad strategies — it is full of custody. Exchanges that froze withdrawals. Managers who vanished. Platforms whose “your funds are safe” page outlived the funds. Every one of those failures required a single ingredient: the customer’s money living in someone else’s hands. So we designed Nodes around one non-negotiable rule — the money never moves. Your capital sits in a trading account that belongs to you, funded from your own wallet, withdrawable by you alone, forever. The engine comes to your money; your money never goes to the engine.
The agent key, precisely
When you activate a Node you grant our engine an agent key — a scoped cryptographic permission that the trading venue itself enforces. Think of it as a valet key for a car that physically has no cargo access: it can drive (trade), and it cannot open the trunk (withdraw), no matter who is holding it. This is not a promise we make; it is a boundary the venue’s permission system enforces at the protocol level. Your master key — the one that can move funds — is generated by you, stored by you, and never seen by us. There is no “admin override,” no support ticket that can move your money, no database of ours where your withdrawal rights live.
Five hard questions, answered straight
What if COMPASS gets hacked?
Worst case, an attacker holds a trade-only key: they could trade your account badly — a real but BOUNDED risk — and they still cannot withdraw a cent. You revoke the key and the exposure ends. Compare that to a custodial hack, where the money is simply gone.
What if COMPASS disappears tomorrow?
Your account and funds are exactly where they always were: with you. The engine stops trading, you revoke the key, withdraw whenever you like. Our disappearance would cost you a subscription, never a balance.
What if the agent key leaks?
Same boundary applies to any holder: trade-only. You revoke, a new key is issued, done. A leaked agent key is an inconvenience; a leaked master key is a catastrophe — which is why we never touch yours.
Can the engine trade my account to zero?
Honest answer: trading can lose money and no honest platform promises profits. The engine operates with risk rules, but market risk is real and bounded position-by-position — not theft-shaped. Size your account so the worst month is survivable. That advice never changes.
Revocation: total control in seconds
Open your venue settings
The agent key you granted is listed in your own account’s permissions — visible to you at all times.
Revoke it
One action. The venue cuts the engine off immediately — no notice period, no approval from us, no waiting.
That’s it
The engine cannot see or touch your account again unless YOU issue a new grant. We actually encourage members to practice this on day one — a kill switch you’ve never used is a rumor, not a control.
Your account is the audit
Because everything happens inside YOUR account on a public venue, you never audit us — you audit reality. Every order, position, and fill is visible to you live, and settles on infrastructure neither of us controls. Whatever any report of ours says, your own account is the source of truth, and nothing we publish can disagree with it without you seeing the difference immediately. In an industry of screenshot merchants, that is the entire point.
What this architecture does and does not do
This design removes CUSTODY risk (no one can take your funds) and bounds OPERATOR risk (worst case = bad trades until you revoke). It does NOT remove MARKET risk — automated trading can lose money, and anyone who tells you otherwise is selling a fantasy. Fund a Node with capital you can genuinely put at risk. That sentence appears everywhere we write, on purpose.
Skepticism satisfied? Good — that was the test.
Explore the Node plans, or take the deep Academy lesson first. Either way, the money stays in your hands. That was always the design.