Security
We never hold
your money.
It stays in your account on the venue. The device only gets trading keys you approved and can revoke; on Hyperliquid the protocol itself won't let that key withdraw. Every order still needs a physical press on the thing in your hand.
Checklist
Why you can relax.
We never hold your money
Funds stay in your account on the venue. There is no Degen Walkie wallet, no deposit address and no server of ours that can move anything.
Trade-only keys
On Hyperliquid the device holds an agent key your main wallet approved. It can place and cancel orders; the protocol does not let it withdraw or change its own permissions.
Revoke any time
One press on the device, or from your main wallet or the venue without the device at all. Revoking cuts the key off immediately.
Lost it? Revoke it.
A stolen device can at worst trade, and only until you revoke; on Hyperliquid it can never withdraw. Six wrong passwords also wipe the keys, with a warning before the last try.
Venues vetted for withdrawal limits
A venue is connected only after we confirm the key we hold cannot move money out. Venues where that is still unconfirmed stay marked planned.
Signed firmware, no downgrade
Only firmware we have signed runs, and it refuses to roll back. USB-C is for charging and signed updates. No debug port.
Secure boot + encrypted flash
ESP32-S3 secure boot, flash encryption and eFuse keys burned at the factory. Trading keys live in encrypted flash behind your password.
AI proposes, you confirm
MCP agents can read and queue proposals. Nothing is sent until the trade key is pressed on the device.
Key model
Main wallet → device. One way.
Your main wallet stays wherever it lives today: browser, phone, hardware wallet. It approves a trading key for Degen Walkie once, on the venue. The device never sees your main wallet's seed.
Owns
- Holds the account on the venue
- The only thing that can withdraw
- Approves and revokes the device
revoke any time
Trades
- Places and cancels orders
- Cannot withdraw
- Cannot change its own permissions
- Agent
- 0x8f3…c21
- Trade
- allowed
- Withdraw
- impossible
- Change permissions
- impossible
- Revoke
- any time, from your main wallet
Meme coins run through your GMGN account and its trading API. Those funds are held by GMGN under GMGN's terms, not by us; the device holds a GMGN API key you can revoke in GMGN.
MCP · AI agents
AI can propose.
Only your thumb can confirm.
An agent can read positions and room context and queue a proposal. The purple light blinks. The proposal shows as a confirmation sheet with every detail. The trade key confirms; the wheel press dismisses. There is no third option, and no API that skips the key.
- Agent note
- “Take profit at 212.”
- Expires
- in 4 min
- Can confirm
- Only you
Power key
Off means touched.
Short press turns the screen off while the room keeps playing. Holding two seconds opens the power-off sheet, and only a finger sliding across the glass confirms it. No key, no agent, no accidental pocket press can power it down.
Power key
Short press: screen off or on, still listening. Hold two seconds: an iPhone-style sheet with slide to power off and Cancel. The wheel press cancels; the slider must be touched.
Open source
Audit it
yourself.
Firmware and schematic go public during the pre-order, before Genesis ships, so you can read the code that holds your trading keys before your unit arrives. The MCP interface spec is published with them.
Firmware
Key storage, order signing, secure boot. The code that touches your keys.
Schematic
Know exactly what's on the board.
MCP spec
So any agent framework can propose.
Enclosure CAD
Print your own shell. Mod it.