Safety and PIN
The risks in crypto trading are real and most products pretend they are not. We built around all of them.
While you were opening this, Dale scanned every token that launched in the last hour. 94 launched. Dale rejected 91. Found you 1 worth a look.
The threat model
Compromised keys. Malicious contracts. Slippage attacks. A second of inattention that ends with an empty wallet. These are the things that have actually rugged people you know. We designed the platform around the assumption that every one of them is happening to someone right now.
Your wallet keys live behind an encryption layer the trading code cannot read. Even when Dale executes a trade, Dale never sees your key. Every PIN you enter building auto deletes from the chat after validation, so the sensitive number never sits in your message history. Forget the PIN and three secret questions building you chose yourself unlock the path back in, all three required, stored as hashes the platform cannot reverse.
Every token Dale touches is scanned by Blockaid first. A token comes back as safe, flagged with warning, or malicious. Coverage includes Solana. Every panel, every surface, every chain enforces the same PIN gate. There is no bypass route. And if the worst happens, Emergency Sell runs on its own mempool monitor on its own process so the exit door stays open even if everything else is down.
The PIN threshold
The PIN gate runs on USD value, not native units. You set the threshold in dollars. Default is $1000. Trades below your threshold execute without re prompt once you have unlocked the session. Trades at or above the threshold prompt for PIN.
Change it any time. set my pin threshold to $500. set my pin threshold to 0 means PIN required on every transaction.
How re prompts work
PIN unlocks a session. Within the session, sub threshold trades execute without re asking. The moment a trade crosses your threshold mid session, Dale re prompts for PIN before it builds the route.
Fast trades stay fast at small sizes. The gate locks the second real money is moving.
What happens when you press PIN
You ask Dale to swap. Dale builds the route, checks the safety scan, surfaces the fees, and asks you to confirm with PIN. You type four to six digits. The moment you send, three things happen at once.
- 01ValidateThe platform validates the PIN against its hashed record. The hash is what we store. Your PIN is not.
- 02DeleteThe original message you typed is removed from the chat, so the digits never sit in your history.
- 03SignYour encrypted wallet key is unlocked inside the security layer, just long enough to sign the transaction Dale prepared, then sealed again.
The signed payload broadcasts to chain. Dale reports back. Receipt in, position updated, done.
If the PIN is wrong, nothing unlocks. The trade does not build. Dale tells you the attempt failed. If the PIN is right but the route became unsafe between when you asked and when you confirmed, Dale aborts before signing and tells you why. Confirmation is not a rubber stamp. It is the last gate.
Same flow on the trade panel. Same flow on every chain. Same flow on Emergency Sell, with a tighter timeout. The PIN is the only path through, and signing happens inside the encrypted layer that holds the key.
What happens when you forget your PIN
You say I need a PIN reset. Dale walks you through the three secret questions you chose yourself at PIN setup. The questions are personal, the answers were yours, and the platform stores only hashes it cannot reverse. All three questions, all three correct. No partial credit. A correct full set unlocks a PIN reset path. Dale asks you to set a new PIN. The new PIN takes effect immediately. The wallet stays locked the entire time, so even during reset, no transaction can move.
If you cannot answer the secret questions, the team handles it. Dale flags the case to the admin channel with a verification request. The team checks identity against on chain history, account context, and wallet activity that only the real account holder would know. Once verified, the team resets the PIN and you are notified in the same chat. Your wallet stays locked until then. Funds are safe. Nothing moves.
Every recovery path has a cost in time, deliberately. The self serve path takes a minute. The human review path takes longer. Easy for the real user, expensive for an attacker, impossible for an attacker without your three answers and the team's verification.
The two recovery tiers
- 01Tier 1. Three secret questionsSelf serve. All three questions answered correctly unlocks a PIN reset path. Hashed answers, no partial credit, no platform side reset.
- 02Tier 2. Verified human reviewLast resort. Team verifies identity against on chain history and account context. Wallet stays locked until verification clears.
The security panel
One menu, three controls. Unlock for the current session. Change PIN when you want to rotate. PIN Settings for secret questions and session timeouts. The same panel on every chain. The same gate on every trade.
Private key handling
Private keys never sit in chat history. When you import a key or export one, the message auto deletes from chat after processing. The sensitive number never persists where it could be screenshotted or leaked. Export runs through @walletdeepbot with a two step confirm.
Deletion safety
Wallet deletion is two step. Dale confirms exactly what is about to be removed and waits for explicit go ahead. Wallets that still hold funds require an additional acknowledgement before the keys are destroyed.
Voice PIN
Authorize a trade by voice. Same gate, different modality. It is off by default and you turn it on yourself with /voicepin. Tap PIN and tap confirm stay available whether or not you enable it. See Trading by voice for the full picture.
How encryption works
Runtime safety
Safety doesn't stop at the buy
Most bots scan a token once at purchase and call it done. Dale watches the whole time you hold. If the deployer raises sell tax mid hold, Dale tells you. If liquidity gets removed, Dale tells you. If the contract gets blacklisted or upgraded into something hostile, Dale tells you. The scan at entry is the floor. Continuous monitoring is the ceiling.
Most products scan once. Dale never stops watching.
Trade like a sharp friend who trades for a living, on infrastructure that assumes someone is always trying.