Last updated: September 2026 · 6 min read
TL;DR
The single question that decides whether an AI trading agent is safe is who holds the withdrawal right. Hyperliquid's approveAgent mechanism lets you grant an agent trading-only permissions via an EIP-712 signature — it can open and close positions but is structurally unable to withdraw. That separates the worst case from "you lost everything" to "you lost the budget you approved," and it makes the whole system revocable on-chain in one signature. This is the architecture every AI trading product should be built on.
Every "AI trading bot" horror story has the same root cause: the bot held full custody. When the AI — or the platform running it — can both trade and withdraw, trust becomes the product. And trust is exactly what crypto was built to make unnecessary.
The alternative is permission separation: give the agent the right to trade, and keep the right to withdraw with you. Then the agent's power is bounded by construction, not by promises.
Hyperliquid's agent system is a native, on-chain feature of the exchange — not an off-chain wrapper. Approving an agent means signing a typed message (EIP-712) from your wallet that adds the agent's address to your account's authorized signers, with a scope limited to order placement:
In a full-custody bot, the worst case is total loss of deposited funds. With trading-only permissions:
Security stops being a claim and becomes a property of the account structure — which is the only kind of security worth selling in crypto.
A four-question checklist:
On Hyperliquid, you can approve an agent wallet with approveAgent — a typed EIP-712 signature that grants the right to open and close positions, but no right to withdraw. Trading and withdrawal rights are separate, so an AI holding trading-only permissions can never move funds out.
No. Withdrawals require your own wallet signature, which the agent never has. The agent can only trade within your account. The worst case of a misbehaving agent is losing the trading budget you allocated — never your main wallet.
Revocation is on-chain and immediate: sign a revoke in your wallet and the agent loses the ability to trade instantly. There is no cooldown and no custodian in the middle.
This page is educational, not financial advice. Read the Risk Disclosure before live trading.