Security

Trading access and withdrawal authority are separate.

Trading balance

Your wallet controls the account

Moving USDC to Trading balance removes it from your Arbitrum token balance and credits a HyperCore account identified by the same wallet address. Novrinex does not receive the funds or your owner-wallet key.

Wallet key

Controls the account

HyperCore account

Holds funds and positions

Wallet signature

Returns USDC to Arbitrum

Leave Novrinex: Connect the same wallet to Hyperliquid, close open positions and withdraw.
Email wallet: Export the private key from Settings and use it in another compatible wallet.
Open positions: Collateral in use cannot be withdrawn until the position is closed or reduced.
Protocol dependency: Deposited funds remain subject to Hyperliquid, bridge and validator risk.

Open the independent withdrawal route

Permissions

Novrinex can: Place and cancel trades after approval.
Novrinex cannot: Withdraw funds or change account permissions.
Owner wallet: Approves withdrawals, recovery and permission changes.

Someone who steals trading access can still lose your money by trading with it. They cannot withdraw it to another address.

Infrastructure

Where your risk sits

As of 07.09.2026 orders execute on third-party venues. Each one carries its own smart contract and counterparty risk, and we cannot cover losses caused by a venue failing. Our own L1 does not settle anything yet.

Review

We have not had a third-party security audit and we do not run official bug bounties. That said, we are always interested in potential exploits and we encourage any potential findings to be sent to the Novrinex team. If you have anything to share please email us or open a support ticket on our website.

Official links

Verify before you connect

Websitenovrinex.com Documentationdocs.novrinex.com GitHubgithub.com/novrinex Supportnovrinex.com/support Statusnovrinex.com/status Xx.com/novrinex Instagraminstagram.com/novrinexmarkets Telegram channelt.me/novrinex Telegram groupNovrinex community

Our support team will never contact you first or ask for a private key or seed phrase. Check the domain here before connecting a wallet or signing.

Token

NVRX

Any official token contract or launch announcement will be published through the verified channels above and on the Updates page. Treat any other contract, claim page, private message or sale as unverified.

Contact

Report a vulnerability

Do not include private keys, seed phrases or passwords.

Open a security ticket