We cannot move your funds out of your Safe.
Not “we promise not to.” The blockchain will not let us. Your money stays in a smart account only your wallet owns, the bot can only swap your chosen pair back into it — never withdraw — and every single trade is provable on-chain. Here is exactly how, what risk is left, and how you can verify it yourself.
Funds live in your own Safe smart account. Your wallet is the sole owner. We are not on it after the handover, which happens right after deployment — and we ask you to send USDC only once it's done.
The bot’s session key is scoped on-chain to swaps of your pair paid back into your Safe, plus the platform fee to our fee wallet, whose key is not on our server. Nothing else can leave.
Each trade is a public transaction. Click through to the block explorer and check it yourself.
The blockchain enforces it — not us
When you connect, the bot is installed into your Safe as an ERC-7579 Smart Sessions module: one session per swap direction you allowed (say USDC → WETH and WETH → USDC), each permitted by an on-chain policy to do three things inside your account — approve the Uniswap V3 router for the token it sells, swap that exact token into that exact token with your own Safe as the recipient, and pay the platform fee to our fee address. Withdrawing, transferring anywhere else, sending ETH or changing ownership are simply not in that permission, and your wallet is the only owner of the Safe’s validator. A compromised bot could not take your funds out or swap them into some other token, because the network rejects any action outside the granted scope. The residual risk is honest and limited: a compromised server could make bad trades in your allowed pairs within your Safe, because the slippage limit on each swap is computed by our server. And you can revoke the key in a single wallet signature, any time, from the Smart Account page. The full threat model, contract addresses and verification steps are on the Security page.
Read the details in our guides on non-custodial bot architecture, ERC-7579 Smart Sessions, and why self-custody matters.
Custodial bots vs DCA Bot
- ✕ Hold your funds, or hold a key that can withdraw
- ✕ Performance reported from an internal ledger you can’t inspect
- ✕ If the company fails or is hacked, your funds are at risk
- ✓ Funds stay in your own Safe — we never hold them
- ✓ Every trade is a public on-chain transaction you can audit
- ✓ If we vanish, your funds stay in your Safe and you withdraw them with your wallet
See the head-to-heads: vs 3Commas, vs Pionex, vs Bitsgap.
Browse real shared strategies — each one carries a “Verified on-chain” badge and links every trade to the block explorer. That’s the whole point: you can check.
See verified resultsFrequently asked questions
How can a trading bot run without being able to take my funds?
Your funds live in a Safe smart account that only your wallet owns. The bot is granted an ERC-7579 session key scoped by an on-chain policy to Uniswap V3 swaps of the token pairs you allowed (for example USDC ↔ WETH), whose output must come back to your own Safe, plus the platform fee, which can only go to our fee address. That key cannot withdraw funds, transfer them anywhere else, send ETH, or change ownership — the network rejects it. What it can still do is trade: someone who stole the key could make bad swaps inside your allowed pairs (the slippage limit is set by our server). Revoking the session with one signature ends that too. The Security page has the full threat model.
What does "verified on-chain" mean for the results?
Every trade the bot makes is an ordinary public Uniswap V3 transaction. On a shared strategy page, each trade links directly to the block explorer, and the executing Safe address is public. Anyone can independently confirm the results — unlike a centralized bot, whose reported performance lives in an internal ledger you cannot inspect.
What happens to my funds if DCA Bot disappears?
Your funds stay in your own Safe smart account, which exists on-chain independently of us, and you can withdraw them with your wallet — for example through Safe{Wallet} — without our app. Your strategies stop running, and you can revoke the bot’s session key at any time. There is no company holding your assets that could fail and take them down with it.
Is this really different from FTX-style custody?
Fundamentally, yes. FTX, Celsius and BlockFi held users’ funds — when they failed, the funds were gone. DCA Bot never holds your funds; the only money that ever reaches us is the platform fee on realized profit. The architectural difference is the entire point: self-custody removes the counterparty whose failure could cost you everything.
Automate your trading without giving up custody
DCA, grid, limit and rebalance strategies on Uniswap V3 for Arbitrum and Base — from a Safe only you control. Start with a free demo, no funds needed; the Free plan trades live too.
Try a free demo