How safe is a crypto trading bot?
How the data was protected while the service ran, and why the funds stayed out of reach, of us as much as of anyone else.
How We Protect You
API Wallet. Trade-Only by Design
LazyEye never has withdrawal access to your funds. Your API Wallet only has trade-level permissions. Your assets stay in your own wallet at all times. We cannot move them.
Secure Credential Handling
API Wallet keys went straight to the user's own bot and were never stored in the central database. Only that bot used them.
Secure Infrastructure
Servers run in an EU data centre and are kept up to date. All traffic between you and our servers is encrypted.
No Access to Your Wallet
We interact only with the exchange API you connect. LazyEye has zero knowledge of your wallet seed phrase, private keys, or withdrawal addresses.
Minimal Data Collection
Only the data strictly necessary to run the bot and the dashboard was collected: email, API Wallet credentials and trade history. That data was never sold or shared with third parties.
Responsible Disclosure
Found a vulnerability? We appreciate responsible disclosure. Please report security issues to security@lazyeye.nl and we will respond within 5 business days.
In Short
- We could never withdraw anyone's funds. Not once.
- API Wallet credentials never touched our database. They went straight to the bot server, with strict access controls.
- We collect only what is strictly necessary.
- Your MetaMask seed phrase and main wallet private key never leave your device.
What You Should Do
Use a Strong, Unique Password
- At least 12 characters with letters, numbers, and symbols.
- Never reuse a password from another site.
- Use a password manager like Bitwarden or 1Password.
- LazyEye checks your password against known data breaches whenever you register or change your password.
Enable Two-Factor Authentication (2FA)
- Go to Settings and enable 2FA with an authenticator app (Google Authenticator, Authy, etc.).
- Save your recovery codes in a safe place. They are your backup if you lose your phone.
- Never share your 2FA codes with anyone.
Secure Your API Wallet
- Only enable "Read" and "Perps trading" permissions. Never enable withdrawals.
- Keep your API Wallet private key safe. Treat it like a password.
- Revoke and recreate your API Wallet periodically. You can update credentials anytime from the dashboard.
Wallet Safety
- Never share your wallet seed phrase or private key with anyone. Not even us.
- Write your seed phrase on paper and store it offline. Do not save it digitally.
- Only deposit funds you can afford to lose. Trading involves risk.
- Double-check wallet addresses before sending any funds.
General Tips
- Beware of phishing. Always verify you’re on app.lazyeye.nl before entering credentials.
- LazyEye will never ask for your password, seed phrase, or private key via email or chat.
- Keep your browser and operating system up to date.
- Check your active sessions in Settings and revoke any you don’t recognize.
- Login notifications are automatic. You’ll get an email whenever someone logs in from a new IP address.