Security

Security at Trading Boy

Trading Boy is designed around account keys, scoped access, paper-trading workflows, and operational guardrails. Security reports should go directly to the security contact path.

Account keys

Full starter keys are shown once during claim. Support will not ask users to send full API keys, private keys, seed phrases, or exchange credentials.

Paper mode boundary

Trading Boy is built for paper-trading workflows and does not hold funds or execute live exchange trades from the public website.

Report a vulnerability

Email security@tradingboy.ai with a concise description, reproduction steps, impact, and affected URL or command.