STA / Security
Security and transparency

Your money stays where it is.

STA does not hold funds: they stay in your OKX account. The API keys are encrypted on our servers and each permission has a single use. And the history of the cards is public and cannot be edited.

The API keys

  • Three permissions with separate uses: reading; trading, only for confirmed cards; withdrawal, only to collect the accrued fee
  • Tested when connected: you see right away which permissions they have
  • Encrypted at rest, never written to logs
  • You can revoke them on OKX in a second

DEMO and REAL kept apart

  • You always start in DEMO
  • REAL is switched on only with your keys and your consent
  • Different colours in the app: you can't mix them up
  • Instant pause of all automations
The card hash

A history nobody can edit. Not even us.

When a card is born, its fixed data (coin, direction, entry, stop, target, time) become a 64-character code: its hash, a unique digital fingerprint. The hashes are published every hour on GitHub and timestamped every day on the Bitcoin blockchain. Anyone can recalculate the hash of a card in the history and compare it with the one published on the day it was born.

Open the verifiable history on GitHub →

card example
SOL-USDC · LONG · 148.20 · 143.90 · 156.80
born 15/10/2026 14:12:00
hash
9f3a7c12e8…b41d0e6a
✓ matches the published one
Sign inTry DEMO