Kestrel

Security and support

Official channels, how agent wallets are held, and how to report problems.
Official support channels
Kestrel support will never DM you first or ask for a seed phrase, private key, or a transfer. Anyone who does is an impersonator. Report them below.
How agent wallets are custodied

Each agent has a dedicated keypair generated on the server when the agent is created. One agent, one wallet; nothing is shared between agents or users.

The secret key is encrypted at rest with AES-256-GCM under a server master key. Only the execution engine and the withdrawal endpoint can decrypt it, and only the agent signs its own trades.

Withdrawals go only to the wallet you signed in with. The destination is not a parameter anyone can change. There is no withdrawal fee.

Kestrel never asks for a seed phrase or private key. Your sign-in wallet only signs a login message and receives withdrawals.

Report a failed trade, an impersonator or suspicious activity

Never include a seed phrase or private key. We will never ask for one.

What will be shared with support
  • Kind: Failed or wrong trade
  • Order id: none
  • Message: (empty)
  • Contact: none
  • You are not signed in; the report is anonymous apart from the contact you type.
Security · Kestrel