Renting a bot can be safe and non-custodial — if you do it in the right order. Here's the five-step checklist.
Before anything else, look at how the track record was produced. Screenshots and backtests prove nothing. You want performance recorded by the platform from the exchange's own data, including losing trades and drawdowns. If you can't tell where the number came from, walk away. (See how to spot a fake track record and how we verify.)
The safest model is one where your money never leaves your own exchange account. You connect a key; the bot places trades on your account; the platform never holds your funds. That's how CodeVaultEx works — we never take custody.
This is the single most important safety step. When you create the exchange API key, enable trading but never withdrawals. A trade-only key can buy and sell inside your account but cannot move money out — not by the bot, the platform, or an attacker. Our connect guide shows the exact toggles for each exchange.
Signals-only means the bot tells you what it would trade and you place the orders — no key required, maximum control. Full auto means the bot trades your connected account automatically. Start with signals if you want to watch a bot's behavior before handing it the keys.
Set your capital, max position size, and a max-drawdown cutoff that halts the bot for your account if losses hit your limit. Start with a small allocation. A good bot survives a bad week; size so you do too.