Security principles
SharKi is designed around least-privilege access, explicit execution permissions, separated user accounts, controlled infrastructure access and auditable events.
Exchange API permissions
Use credentials with only the permissions required for trading. Normal trading connectivity should not require withdrawal permissions or custody transfer to SharKi.
Protect your account
- Use a unique password.
- Protect the linked email account.
- Do not share session tokens or exchange API secrets.
- Review exchange API permissions regularly.
- Rotate credentials if compromise is suspected.
Infrastructure and logging
Operational logs, security events and account actions may be retained for troubleshooting, fraud prevention, auditing and incident response, subject to the Privacy Policy.
Responsible disclosure
If you find a vulnerability, do not exploit it or access other users' data. Report it through Official SharKi Telegram until a dedicated security mailbox is activated.
What support will never ask for
SharKi support will never ask for your exchange password, wallet seed phrase or private key.