Security

Security

Your security is our top priority. Mobots is built with multiple layers of protection to keep your funds and private keys safe.

🔐 How We Protect You

Encrypted Key Storage

Your private keys are never stored in plain text.

Our encryption:

  • 🔒 AES-256 encryption - Industry-standard military-grade encryption
  • 🔑 Unique salts - Each key encrypted with unique parameters
  • 🗄️ Secure MongoDB - Protected database infrastructure
  • 🛡️ No plain text - Keys never exist unencrypted on disk

What this means:

  • ✅ Even database breaches can't expose your keys
  • ✅ Keys are computationally infeasible to decrypt without the master key
  • ✅ Your funds remain secure

Auto-Delete Messages

Sensitive information disappears automatically.

What gets deleted:

  • 🔑 Private keys you send when importing wallet
  • ⏰ Deleted immediately after processing
  • 🗑️ No trace left in chat history

How it works:

You: [sends private key to import]
Bot: ✅ Wallet imported! (deletes your message within 1 second)

Benefits:

  • 👀 No one can see your key in chat history
  • 📱 Safe from screenshots
  • 🔒 Maximum privacy

Spoiler Tags

Exported keys are hidden until you tap to reveal.

When you export your key using /wallet, it appears like this:

🔑 Your Private Key:

||0x1234...your key here...||

⚠️ Tap to reveal. Keep private!

Protection benefits:

  • 🙈 Not visible in notifications
  • 👥 Safe when others see your screen
  • 📸 Doesn't show in quick screenshots
  • 🔒 You control when it's revealed

🔒 Non-Custodial Design

You Control Your Funds

Mobots is completely non-custodial.

What this means:

  • ✅ You own your keys - We store them encrypted, but can't access funds
  • ✅ No withdrawals needed - Use your key in any wallet anytime
  • ✅ No lock-up periods - Access funds 24/7
  • ✅ No third-party risk - Funds never held by us

Traditional vs Non-Custodial:

Traditional ExchangesMobots (Non-Custodial)
They hold your fundsYou hold your funds
Need to withdrawAlways accessible
Can freeze accountsNo one can freeze
Third-party riskYou control everything

🛡️ Transaction Security

Multiple Safety Layers

Every transaction is protected by multiple checks.

Before Execution:

  • ✅ Balance verification
  • ✅ Address validation
  • ✅ Gas fee calculation
  • ✅ Token contract verification

During Execution:

  • ⚡ Optimal gas prices
  • 🔍 Transaction simulation
  • 🎯 Slippage protection
  • ⏰ Timeout protection

After Execution:

  • 📊 Confirmation verification
  • 🔗 Explorer link for transparency
  • 💰 Balance update
  • 📝 Transaction record

🚨 Security Best Practices

Protecting Your Private Key

✅ DO These Things

  1. Save your private key immediately after wallet creation
  2. Store offline in secure location (password manager, encrypted note)
  3. Keep multiple backups in different secure locations
  4. Export regularly using /wallet to verify you have access
  5. Use spoiler tags when exporting (built-in protection)
  6. Delete exported messages after copying to clipboard
  7. Use bot in private chats only, never in groups
  8. Verify addresses before sending large amounts

❌ NEVER Do These Things

  1. Never share your private key with anyone (we will never ask for it)
  2. Never post keys in groups or public channels
  3. Never screenshot private keys (use copy/paste)
  4. Never store keys in cloud services without encryption
  5. Never use this wallet for real mainnet funds
  6. Never approve suspicious token contracts
  7. Never click suspicious links claiming to be from the bot
  8. Never trust anyone asking for your key "to help"

🎣 Avoiding Scams

Common Scam Tactics

Be aware of these scams:

🎭 Impersonation

Scam: Fake accounts pretending to be support

Protection:

  • ✅ Our bot is @Mobotsbot
  • ✅ We never DM you first
  • ✅ We never ask for private keys
  • ✅ Check username carefully

🪝 Phishing Links

Scam: Fake bot links or websites

Protection:

🎁 Too Good to Be True

Scam: "Send ETH to test" or "airdrop verification"

Protection:

  • ✅ No legitimate process requires sending funds
  • ✅ Real airdrops never ask for keys
  • ✅ If it sounds too good, it's a scam
  • ✅ Verify through official channels

💬 Fake Support

Scam: "Support team" asking for your key

Protection:

  • ✅ Real support never asks for private keys
  • ✅ We can help without your key
  • ✅ All support through official channels
  • ✅ Report suspicious contacts

🔍 Verifying Authenticity

Official Bot Details

Verify you're using the real Mobots:

Red flags:

  • ❌ Slightly different username (@Mobotsbot1, @Mobots_bot, etc.)
  • ❌ Asks for private key via DM
  • ❌ Requests payment or fees
  • ❌ Promises unrealistic returns

🌐 Network Security

Monad Testnet Safety

Why testnet is safer for testing:

  • 🧪 No real money - All funds are worthless test tokens
  • ✅ Safe experimentation - Learn without financial risk
  • 🔒 Same security - Practice real security habits
  • 📚 Learning environment - Perfect for new users

⚠️ Testnet Disclaimer

Monad testnet is for testing only. Never send real mainnet funds:

  • ❌ Not compatible with Ethereum mainnet
  • ❌ Testnet ETH has no value
  • ❌ Cannot bridge to mainnet
  • ✅ Perfect for learning and testing

🔐 Smart Contract Security

How Mobots Interacts with Contracts

Token Approvals:

  • 🔍 Approval only given to official Monad DEX routers
  • ⚠️ One-time approval per token
  • 🎯 Limited to specific amount (can be revoked)
  • ✅ Standard ERC-20 security practice

Trading:

  • 🤖 Routes through verified V2 liquidity pools
  • 💰 No funds held in intermediate contracts
  • ⚡ Direct wallet-to-pool transactions
  • 🔒 Non-custodial at all stages

📱 Telegram Security

Using Telegram Safely

Telegram features that protect you:

  • 🔐 End-to-end encryption (in secret chats)
  • 🔒 Cloud encryption (in regular chats)
  • 🗑️ Auto-delete messages (we enable this)
  • 🙈 Spoiler tags (we use for keys)

Additional tips:

  • ✅ Enable 2FA on your Telegram account
  • ✅ Use a strong password
  • ✅ Don't share account with others
  • ✅ Log out from untrusted devices

🚨 If Something Goes Wrong

Suspected Compromise

If you think your key is compromised:

Immediate actions:

  1. Transfer all funds to a new wallet immediately
  2. Create new wallet in the bot
  3. Never use compromised wallet again
  4. Report the incident if it was a scam

Reporting Security Issues

Found a vulnerability?

We take security seriously. If you discover a security issue:

  1. Don't disclose publicly
  2. Contact us privately through official channels
  3. Provide details about the vulnerability
  4. We'll respond quickly and credit you (if desired)

✅ Security Checklist

Daily Security Habits

  • Only use official bot: @Mobotsbot (opens in a new tab)
  • Never share private key
  • Verify token addresses before trading
  • Check transaction confirmations
  • Monitor balance for unexpected changes

Weekly Security Habits

  • Export private key to verify backup is correct
  • Review transaction history on explorer
  • Update Telegram app to latest version
  • Check official announcements for updates

One-Time Setup

  • Save private key in secure offline location
  • Enable 2FA on Telegram account
  • Bookmark official bot link
  • Join official community channels
  • Read all security documentation

🎓 Security Education

Understanding Blockchain Security

Key principles:

  1. Private keys = complete control

    • Whoever has the key owns the funds
    • No password resets or recovery
    • Irreversible if lost or stolen

  2. Transactions are permanent

    • Cannot be reversed
    • Cannot be canceled after confirmation
    • Always verify before confirming

  3. Trust but verify

    • Check addresses carefully
    • Verify on block explorer
    • Don't trust, verify

🔗 Additional Resources

Learn More About Security

💡 Remember

🔑 Golden Rule of Crypto Security

"Not your keys, not your crypto"

With Mobots, you control your keys (non-custodial), which means you control your crypto. But it also means you're responsible for keeping them safe.

Save your private key. Protect it like cash. Never share it with anyone.

Next Steps:

Getting StartedToken