Skip to main content
Shroud is not a custodian. It holds no pooled balance and runs no order book, so it has no power to freeze or seize funds in a wallet whose key you hold. Launch plan wallets are the exception: see where the line is.

​
Your keys

  • Signed on your device. Every manual trade, transfer and launch from the Create window is signed in your browser.
  • Secured by Turnkey. Your account’s keys never sit on Shroud’s servers by default.
  • Yours to take. Export your recovery phrase or any key at any time and use it anywhere.

​
Where the line is

Automation acts while you are away, which a key held only by your browser cannot do. So:
  • Server signing is per wallet. It turns on for a wallet when you put it to work in a Reflex task, an order or a Volume activity, and nothing is enabled by default.
  • An enabled wallet’s key is encrypted and used only for the work you set up.
  • Settings → Account → Trusted wallets lists every such wallet, and Revoke deletes Shroud’s copy immediately.
  • Launch plans run on the server end to end. Your dev wallet’s key is handed over when you create, fund or launch a plan, and the plan’s own wallets are created and held by Shroud. Those cannot be exported; sweep their SOL back when you are done.
Keep long-term holdings on wallets without server signing.
A wallet list where three wallets are signed on your device and one has automation switched on

Trades are signed on your device; automation only runs where you switch it on.

​
If Shroud goes down

Your wallets are secured by Turnkey, not held by Shroud, and your recovery phrase restores every one of them into Phantom or another wallet without us. The exceptions are wallets Shroud holds for launch plans, so keep their balances swept back.

​
Protections while you trade

  • Slippage limits: a trade reverts rather than fill at a price you did not accept.
  • Withdrawal check: sending to a new address asks for your sign-in method first.
  • Two-factor: add an authenticator app in Settings → Security for withdrawals and key export.
  • Buy guard: refuse buys when too much outside SOL sits ahead of you.
  • Honest results: an unconfirmed trade is reported as unconfirmed, never as a success.

​
Good habits

On paper, offline. Never in a screenshot, a note or a chat.
Fewer extensions, fewer scripts, less to attack.
Anyone at your unlocked browser can trade through Shroud.
Give server signing only to wallets holding what a strategy needs.
Clipboard malware swaps addresses on paste. Compare the first and last four characters.
Shroud will never ask for it. Support DMs and “verify your wallet” links are scams.
Most launches go to zero, even with perfect execution.

​
Found a vulnerability?

DM us on X before disclosing publicly. We pay for material findings.