01
No withdrawal permission
The bot should not need withdrawal rights. Customers should reject any setup that asks for withdrawal access.
Your assets stay in your exchange account.
Non-custodial means HalalCrypto is designed to operate through limited exchange permissions instead of taking possession of customer crypto or fiat.
Funds location
Customer exchange account
Expected API scope
Spot trading only
Withdrawal access
Not required
Customer control
Pause or revoke at exchange
02
Trade-only automation
The intended permission set allows spot orders and balance visibility needed for risk controls, not custody or external transfers.
03
Revocation stays with the customer
Customers can pause the bot in the dashboard and can revoke the API key directly inside the exchange account.
What non-custodial means here
HalalCrypto does not ask customers to send crypto to a HalalCrypto wallet. The customer keeps their assets at the connected exchange and authorizes limited automation through an API key.
Expected permission model
A correct setup uses spot trading permissions and balance read permissions that allow the bot to size, enter, exit, and pause positions within the customer's own account.
- Enable only the minimum permissions needed for spot automation.
- Disable withdrawals on the API key.
- Use exchange-side controls such as IP restrictions when available.
What can still go wrong
Non-custodial does not remove market risk, exchange risk, API-key risk, network outages, user setup errors, or the possibility that a trade loses money.
Customer checklist
Before connecting, customers should verify the API permission screen, save recovery access to the exchange account, understand how to revoke a key, and start with the risk profile that matches their loss tolerance.
Permission rule
No normal HalalCrypto onboarding should require withdrawal permission. If a setup flow ever asks for withdrawal access, stop and contact support before continuing.
Last updated: 2026-05-04