Security
How we keep you in control of your money, always.
Your money never leaves your control
INTENT is non-custodial. Your wallet and its keys are created on your own device and never leave it. We never hold your funds and never hold your keys, so we cannot move, freeze, or lose your money, and neither can anyone who compromised our systems. There is no central pile of customer funds for an attacker to target. Some services keep a standing permission to move your money for you, even while you hold the keys. INTENT holds no permission of any kind. The only software that can move your money is yours, running on your own computer.
Verified on-chain, not just trusted
Before your agent acts, it independently verifies each market directly on the blockchain, confirming it's a genuine pool and deriving the reward contracts on-chain. Even if our servers were compromised, your agent would not act on a market it couldn't verify itself. Payment data is handled by Stripe (PCI-DSS compliant), not stored on our servers; the only account data we keep is a one-way hash of your email.
The protocols your money interacts with
Your agent deploys into established third-party decentralised exchanges: Aerodrome, Shadow and Uniswap, using swap routers such as KyberSwap and ParaSwap. These are independent protocols we don't control, and they publish their own security audits (linked here, via their documentation). Smart contracts carry inherent risk. An audit reduces it but never removes it, so it's worth reviewing their audits before you deploy, and following their official channels (linked from each site above) for important updates.
Deep markets, not guaranteed markets
Your agent only deploys into markets that have been vetted: real, deep pools on Aerodrome, Shadow and Uniswap, verified on-chain and reviewed for liquidity before they're listed. But "vetted" is a snapshot, not a promise. The liquidity in a pool is supplied by third parties who can add or remove it at any time, so depth measured today can thin out tomorrow, and a market that looks healthy can move against you or become harder to exit. Neither we nor your agent control these pools or the tokens in them, and deep liquidity is a sign of health, not a guarantee against a token's own risks. Your agent verifies a pool is genuine before it acts, but it can't guarantee a pool will stay deep, so it's worth understanding a market yourself before you deploy into it.
What this protects, and what it doesn't
Non-custody protects your money from theft, whether by us or by anyone who breaches our systems. It does not protect its value: digital assets rise and fall with the market, and you can get back less than you put in. Your recovery phrase is the master key to your wallet. Keep it safe and offline, and never share it with anyone, including us. We will never ask for it.
INTENT is non-custodial software and a market-intelligence data service. We never hold your funds or keys, and we don't provide financial advice or manage money on your behalf.