Security at Hopivia
Hopivia is non-custodial. It never holds your funds, never sees your private key and cannot move tokens without a transaction you sign in your own wallet. This page explains what that means in practice.
What Hopivia never does
- It never asks for a private key, a seed phrase or a password. There are no accounts.
- It never signs on your behalf. Every transaction and every message signature is shown in your wallet before it happens.
- It never routes funds through its own server. The site is static files; the trade goes from your wallet to the exchange's contract.
- For AI agents, the API returns unsigned transactions. The agent signs them with its own wallet.
Token approvals
To swap an ERC-20 token, your wallet grants an allowance to the contract that executes the swap. Hopivia asks for an allowance only for the token you are about to trade. For delegated access the allowance is set to "daily cap × days until expiry" rather than unlimited. You can review and revoke any allowance at any time in your wallet or in a block explorer.
Contracts
- Swaps are executed by the public router contracts of the exchanges Hopivia compares, such as PancakeSwap and Uniswap, or by the Hopivia aggregator contract where it is deployed. Addresses are shown in the swap details before you sign.
- Delegated access is a Hopivia contract with no owner and no admin functions; the list of exchanges it may call is fixed at deployment. Addresses and networks are listed on the AI agents page and in the API documentation.
- Token approvals go through Permit2, the canonical permission contract used by Uniswap and others.
Third parties
Cross-chain swaps are quoted and executed by LI.FI, Symbiosis and deBridge. Prices and descriptions come from CoinGecko. Token safety checks use GoPlus. Energy rental on Tron is bought from TronSave or TronNRG directly from your wallet. Each of these processes your request on its own servers; none of them receives your keys.
Staying safe
- Check the address bar: the only site is hopivia.com. Hopivia has no browser extension, no mobile app and no support staff who message you first.
- Read what your wallet shows before confirming. A swap shows the input, the minimum output and the recipient; an approval shows the token, the spender and the amount.
- Give AI agents a limit, never a key. See the guide on limited access for AI agents.
- Found a vulnerability? Please report it through the project's channels listed on the About page before disclosing it publicly.
Updated: