Security

A vault that talks to no one.

A trading bot has to sign your transactions, so it has to hold your keys. The real question is where, and with what limits. At Scope, your keys live in a separate vault with no internet access, which only signs what fits strict rules.

Open the Telegram bot Open the web app

How your keys are kept

An offline signerYour keys are encrypted in a separate vault with no internet access at all. The server that talks to the Solana network never holds your keys.
Rules it can't breakThe vault only signs pump.fun buys and sells, and withdrawals you approved. Any transaction outside those rules is refused.
Your key, onceShown for 10 seconds at creation so you can keep it, then never again.
Withdrawals in your handsPasskey on the web, app code on Telegram. The bot alone can't move anything out of your wallet.

Why bots get drained

When a trading bot gets hacked, it's almost always because users' keys were reachable from an internet-facing server. One flaw on that server is enough to empty everything.

Scope splits the roles: the engine that spots trades and sends transactions doesn't hold keys; the vault that holds keys has no internet and checks every request. Even a compromised engine couldn't get it to sign a transfer to an unknown address.

What Scope will never ask you

If someone asks you for this in Scope's name, it's a scam. Only official address: scopebot.trade.

Your recovery phrase or private key.
To click a link to « verify » or « unlock » your account.
To approve a withdrawal by message.
To send it SOL to « unlock » or « verify » your account.

Your account, protected like a bank account

Passkey: sign in and withdraw on the web with your fingerprint, face or security key.
App code (Google Authenticator, 1Password…) to approve sensitive actions on Telegram.
Recovery codes in case you lose your phone.
Connected devices: see where your account is open and sign out anything you don't recognize in one click.

What stays on you

No tool makes a memecoin safe. Scope protects your keys and runs your rules; it doesn't pick your coins for you. Keep on your Scope wallet what you're ready to trade, not your savings. To limit damage on the coins themselves, read how to avoid rug pulls.

FAQ

Can Scope withdraw my funds?

No. The vault only signs a withdrawal you approved with your passkey or app code.

Can I take my wallet elsewhere?

Yes. The private key shown at creation lets you import your wallet into Phantom or any Solana wallet whenever you want. Keep it offline.

What if my Telegram account gets hacked?

Without your app code, nobody can withdraw your funds. Turn it on as soon as you create your account.

Don't other bots do the same?

Some bots isolate their keys too. Before trusting any bot with funds, ask where the keys are and what stops a hacked server from using them.