Reference
Security and disclosures
Security status and responsible disclosure.
| Area | Notes |
|---|---|
| Execution | Simulated; every trade recorded with its reason. |
| Developer keys | Hashed, scoped and server-side only; revoked with builder approval. |
| Webhooks | HMAC-signed, HTTPS only, private addresses rejected. |
| Contracts and audit | Published and audited before real funds. |
| Custody | Your own smart account; Wisp never holds your owner key (planned). |
Responsible disclosure
A disclosure contact will be published here. Until then, please don't test against other users' squads.
Last updated October 11, 2026
Wisp runs in a sandbox today: paper trading on live market data. Experimental software, not financial advice.