Security
apys is designed so that you never have to trust us with your funds. Here's exactly how the security model works.
Non-custodial — your keys, your funds
apys never has access to your private keys. When you connect your wallet (Phantom, Backpack, or any Solana wallet), the connection is read-only until you explicitly approve a transaction. Your keys stay in your wallet at all times.
This means even if apys' servers were compromised, an attacker could not move your funds. Every transaction requires your wallet signature.
Simulate before you sign
Before apys asks you to sign anything, every transaction is simulated on-chain. This catches errors — insufficient balance, misconfigured pools, failed instructions — before any real funds are at risk.
If a simulation fails, apys surfaces the error and won't ask you to sign. You only see transactions that are expected to succeed.
Direct protocol interactions
apys doesn't use any intermediary smart contracts or proxy protocols. When you deposit into Kamino, your transaction goes directly to Kamino's smart contracts. When you swap via Jupiter, it's a direct Jupiter swap.
There is no "apys contract" sitting between you and the protocols. This eliminates an entire category of risk — if apys disappeared tomorrow, your funds would still be safely deposited in the underlying protocols, accessible through their own interfaces.
Full transparency before approval
Before you sign, apys shows you exactly which protocols, pools, tokens, and amounts are involved. You see the expected APY, the allocation breakdown, and the match criteria — which of your parameters each pool satisfied.
Every transaction apys builds is a standard Solana transaction. You can inspect it in your wallet's transaction preview and verify the instructions on-chain after execution using any Solana explorer.
Audited protocols only
apys only integrates with protocols that have been professionally audited and have established track records on Solana. We do not connect to new, unaudited, or experimental protocols.
See the Protocols page for details on each protocol's audit history and security posture.
What apys can and cannot do
apys cannot
- ✗Move your funds without your wallet signature
- ✗Access your private keys or seed phrase
- ✗Prevent you from withdrawing at any time
- ✗Lock your tokens in a apys-controlled contract
- ✗Modify a transaction after you've signed it
apys can
- ✓Read your wallet's public address and token balances
- ✓Build unsigned transactions for your review
- ✓Simulate transactions to check for errors
- ✓Broadcast signed transactions to the Solana network
- ✓Show you pool data, APYs, and pools matching your parameters
Infrastructure
RPC provider
apys connects to Solana through Helius — a reputable, high-availability RPC provider used by major Solana applications. This ensures reliable transaction submission and real-time data.
Data sources
Pool and protocol data comes from DeFiLlama (the industry-standard DeFi analytics platform), direct on-chain reads, and protocol APIs. Data is cross-validated and refreshed every 12 hours.
Anomaly detection
apys automatically monitors for suspicious pool behavior — APY spikes greater than 50%, sudden TVL drops, stablecoin depeg events, and prediction flips. Flagged pools are excluded from match results until reviewed.