Non-custodial agent wallets
Anello never takes custody of your funds. You do not deposit to Anello, send assets anywhere, or hand over the keys to your wallet. Automation runs through a Hyperliquid feature called agent wallets, and understanding it is the best answer to the reasonable question “what exactly am I trusting here?”
What an agent wallet is
Section titled “What an agent wallet is”An agent wallet is a separate keypair that your main wallet explicitly authorizes to sign orders on its behalf. The authorization is a transaction you approve on Hyperliquid; from then on, the agent can place and cancel orders for your account.
That is the entire scope. An agent wallet:
- cannot withdraw funds: there is no withdrawal authority in the agent model at all,
- cannot transfer assets to other addresses or accounts,
- cannot change account settings or authorize other agents,
- can be revoked by you at any time directly on Hyperliquid, without Anello’s involvement.
Your assets sit in your own account on Hyperliquid the whole time. The agent is a signing permission, not a wallet that holds anything.
How Anello uses it
Section titled “How Anello uses it”Each grid or DCA bot gets its own agent wallet, and the terminal uses one persistent agent for all your manual trading. In every case the flow is the same: Anello creates the agent and asks your wallet to approve it on Hyperliquid, and you see and sign that approval yourself. Orders are then signed with the agent key. Your main wallet’s private key is never seen, stored, or requested by Anello; the approval signature is the only thing your key ever produces in this flow.
Agent authorizations on Hyperliquid are time-limited (up to 180 days). When an authorization approaches expiry, it has to be renewed with a fresh approval from your wallet. That’s a deliberate property of the model: automation access lapses by default instead of living forever. Anello warns you through notifications before an agent expires.
What this protects against, and what it doesn’t
Section titled “What this protects against, and what it doesn’t”The agent model removes the largest risk of bot platforms: custody. A compromised or malicious platform with custody can drain deposits. A compromised agent key, by contrast, could at worst place unwanted orders on your account. Disruptive, but it cannot move funds out, and revoking the agent ends it.
It does not protect against market risk. Orders the agent places are real trades with real outcomes; see Risks of grid & perp trading. Non-custodial means your losses can only come from trading, not from trusting. It doesn’t mean there are none.
Your responsibilities
Section titled “Your responsibilities”The model keeps you in control, which means a few things stay genuinely yours to do:
- Understand what you approve. The agent approval is the moment of trust. Know what bot or surface it’s for.
- Monitor your account. Open orders and positions are visible on Hyperliquid at all times; notifications make fills and bot status hard to miss.
- Revoke when done. If you stop using a bot, or stop trusting anything, revoke the agent on Hyperliquid. Stopping a bot in Anello cancels its orders; revoking the agent removes its ability to sign at all.