🔑 Security

Polyfox is non-custodial: your wallet's private key is yours The wallet is a standard on-chain account, and you can export the key or use it from any wallet at any time. Your access to your funds never depends on Polyfox staying online.

Your wallet, plainly

• When you open Polyfox, a normal Polygon wallet is created for you: a public address and a private key that you can export. The address is yours on-chain — every deposit, trade and withdrawal is publicly visible and independently verifiable.
• Operations run under permissions you grant when you set them up: your trades, your copies, your Auto Trade rules, the withdrawals you confirmed — and nothing else.
• You can export the key on demand and control the same funds from any wallet. You are never locked in, and your access never depends on Polyfox.

Why Polyfox can trade while you're offline

Copy subscriptions and Auto Trade rules execute while you are away — something has to sign those trades at 3 a.m. When you set up a copy or a rule, you grant a signing permission scoped to exactly that: the operations you configured, and nothing else. Withdrawals always require your explicit confirmation (plus the funds password if you set one).

Exporting your key

1. Open 💳 Wallet → 🔑 Export Keys.
2. The bot warns you first — anyone holding this key controls the wallet — and asks for your funds password if you set one.
3. The key is shown once, in a self-destructing message.
4. Import it into MetaMask or any wallet that supports private-key import — you control the same funds directly on-chain. Sub-wallets used for copy trading have exportable keys too.

Treat an exported key like cash. Good places for it: a password manager, or paper kept somewhere safe. Bad places: screenshots synced to cloud storage, chat messages, notes apps — and never paste it anywhere except a wallet you trust.

The funds password

You can set an optional funds password (4–16 characters) under Wallet → Password Protection. Once set, it is required for the three operations that move or expose funds:

• withdrawals,
• private-key export,
• wallet deletion.

With the password set, someone who briefly gets hold of your unlocked Telegram cannot drain the wallet.

There is no reset if you forget it. The password is stored only as an irreversible hash, and every path that changes or removes it requires the current password first. A forgotten funds password leaves your balance fully tradeable and deposits working — but withdrawals, key export and wallet deletion stay locked. Choose a password you will genuinely remember, or store it in a password manager; it protects exactly the operations that matter.

What the bot will and won't do

• It will sign only the operations you configured: your manual trades, your copies' mirrored trades, your Auto Trade rules, automatic redemption of resolved positions, and withdrawals you explicitly confirmed.
• It won't move funds to anyone else on its own; withdrawals always require your confirmation (plus the funds password if set).
• Deleting a wallet in the bot removes the bot's access; the funds remain on-chain at the address, reachable with the exported key.

Importing an existing wallet

You can import an outside wallet by sending its private key — the bot warns you explicitly and deletes the key message after import. Only import keys you fully control. If in doubt, use the generated wallet: a key that has been typed into fewer places is a safer key.

Sensible habits

• Check the deposit address and every withdrawal on PolygonScan — everything Polyfox does with your wallet is public on-chain.
• Set the funds password before your first significant deposit.
• Export and safely store your key early, while everything works — an export you already hold is what keeps your access independent of the bot later.

Next steps

Open Polyfox