Documentation
Session Key & Security
What you sign, what it can do, and what it can never do.
Before trading you sign two approvals with your own wallet: the trading session key, and the builder fee ceiling.
The session key, plainly
- Generated in your browser, on your device. EXOS servers never see it.
- It can only sign orders. It cannot withdraw, transfer, or move funds, on Hyperliquid or anywhere else.
- It expires with your browser session and can be revoked at any time.
The fee approval
You approve a builder fee ceiling of 1.000% exactly once, on-chain, and can revoke it at any time in Settings. The fee actually charged is 0.035% today, can be lower with a referral discount, and can never exceed the ceiling you approved.
Regional availability
EXOS is not offered in certain jurisdictions. Access from comprehensive-sanctions jurisdictions is blocked by location; the other restrictions are terms you accept each time you connect. The full list and the eligibility terms are in the Terms of Use. Because EXOS is non-custodial, regional restrictions never touch funds: anything you hold remains yours on the protocol, reachable through other interfaces.
Good hygiene
- EXOS will never DM you first, ask for your seed phrase, or ask you to send funds anywhere.
- Check the domain before connecting. Bookmark it.
- Revoke the session key on shared devices when you finish.