Keys encrypted at rest
Symmetric key encryption with periodic rotation and no plaintext keys in the logs.
No custody, no signing, no withdrawals.
HELIX only reads. If you switch it off tomorrow, your positions stay exactly where they are.
What is true even in this demo
These are statements you can check by looking at the site, not promises.
No private key is ever requested
No field on this site asks for a recovery phrase, a private key or exchange credentials.
No data is transmitted
The values shown come from a content file in this project. There is no server receiving anything.
No operation is possible
There is no path on this site that leads to buying, selling or moving anything.
What a real product would have to guarantee
This is the specification, not an achievement. None of these items is implemented here, and none has been verified by a third party.
Read permissions only
API keys carrying withdrawal permission should be refused at connection time.
Mandatory second factor
A time-based code on every sign-in and on every new wallet connection.
Access log
Every session recorded with device, address and date, exportable by the user.
A careful interface is not a security guarantee.
None of the items above has been independently verified. A real product would require an audit, and an audit is a document, not a marketing page.