Safety & Security

Your money stays in
your Binance account.

Zignalbox never holds, moves, or has access to your funds. This page explains exactly how everything works — in plain language.

Where is my money?
Your money never leaves your Binance account. You keep full ownership and access at all times.

Zignalbox connects to Binance through API keys — think of it as giving someone a key to open the door, but not the right to take anything out.

You can log in to Binance at any time and see your full balance. Nothing is hidden from you.
What can the bot do with my keys?
When you connect Binance, you create API keys with specific permissions. Zignalbox only needs — and only asks for — two things:
✓ CAN DO
Read your account balance
Place and manage trades (buy/sell)
Set stop-loss and take-profit orders
✗ CANNOT DO
Withdraw funds to any address
Transfer between accounts
Change your Binance password or settings
See your personal information
Important: When setting up your API key on Binance, make sure the "Enable Withdrawals" option is NOT checked. This is a permanent safety lock.
What are my risks?
Algorithmic trading involves real financial risk. Here is what you need to know in plain numbers:
Risk per trade ~1.5% of your balance
Maximum historical drawdown (Futures) ~2.5% of balance
Maximum historical drawdown (Spot) Up to ~22% (SOL)
Stop-loss protection Always active on every trade
Negative months possible? Yes — especially in sideways markets
Can I lose everything? No — each trade has a maximum loss limit
Every single trade has an automatic stop-loss order placed on Binance at the moment of entry. Even if Zignalbox goes offline, your stop-loss stays active on Binance.
Can I stop it anytime?
Yes — you are always in control. You can stop the bot in under 30 seconds:
1
Go to Dashboard → Exchange. Click "Disconnect" to remove your API keys from Zignalbox.
2
Optionally, delete the API key in Binance. Go to Binance → Profile → API Management → Delete. This is a permanent revocation.
3
Your open positions remain on Binance. Stop-loss orders stay active and protect you even after disconnecting.
How is my account protected?
Several layers of technical protection are in place:
AES-256 Your API keys are stored encrypted with military-grade AES-256-GCM encryption. Even if someone accessed our database, they could not read your keys.
IP LOCK Binance only accepts trade requests from 3 fixed IP addresses that belong to Zignalbox's servers. Any attempt from another IP is automatically rejected by Binance.
NO WITHDRAW Withdrawal permission is disabled at the API key level. This means it is technically impossible for Zignalbox to move funds out of your account, even in a worst-case security scenario.
MONITORING Automated systems check your API key health daily (09:15 UTC) and monitor for IP drift every 6 hours. If anything looks wrong, you receive a Telegram alert immediately.