Security
NoryX is designed so that user funds remain on the connected exchange, trading access is limited to supported operations, and users retain control.
NoryX connects to supported exchanges through API credentials. Funds, trading access and withdrawal access are kept separate by design.
NoryX is software, not a custodian. Supported trading occurs through the connected exchange — not through NoryX-held balances.
NoryX does not receive deposits from users. No funds are transferred to NoryX.
NoryX does not hold customer crypto balances. Assets remain inside the connected exchange.
Withdrawal permissions are not required for supported trading operations.
Users should review their exchange API permissions carefully and only enable the permissions required for supported trading.
NoryX should not require withdrawal permissions for supported trading operations. Users should never enable withdrawal or transfer permissions on API keys connected to NoryX. If the exchange API permission model changes, this wording should be kept technically accurate.
NoryX connects to supported exchanges through API credentials for supported trading functions. Credentials are forwarded securely to the trading engine and are not stored in plaintext in the application database.
Users can pause supported live trading, disconnect the exchange and manage account access using available platform controls.
NoryX also depends on third-party infrastructure. Availability, execution quality and service continuity may depend on those third parties. NoryX does not control third-party uptime.
If you believe you have identified a potential security vulnerability involving NoryX systems, please review our responsible disclosure guidelines.
View Responsible Disclosure