Security

How Husher's non-custodial design creates security through structural separation, not policy promises

Husher is built on a non-custodial foundation. Security begins with the structural fact that Husher never holds, controls, or has access to user funds at any point in a standard swap. There is no internal balance, no hot wallet, and no custody layer for an attacker to compromise.

In a standard swap, the security model works through clear separation: users control their own keys, Exchange Service Providers handle execution briefly, and Husher acts solely as a routing and orchestration interface between them.

Security in this model comes from structural boundaries, not promises. Understanding where each party's control begins and ends is the starting point for using Husher safely.

Security model at a glance

Area	Who controls it	Husher's exposure
Private keys and wallets (standard swaps)	You	None
Deposit address generation	Exchange Service Provider	None
Trade execution and settlement	Exchange Service Provider	None
Routing and orchestration	Husher	No custody taken
Delivery to destination wallet	Exchange Service Provider	None

One exception applies to the table above. Batch & Collect's optional Automatic Mode is the only flow where you choose to share private keys with Husher. When you do, the keys are used solely to perform the collection and are then discarded; they are not stored, logged, or retained. Every other swap, including Batch & Collect Manual Mode, follows the key-free model above. See Key Ownership.

Explore the security section

Key Ownership

When Husher does and does not interact with private keys, and why standard swaps never require them.

Fund Flow

How funds move from your wallet to destination without passing through Husher.

ESP Role

What Exchange Service Providers are responsible for and where their boundaries sit.

Infrastructure Boundaries

What Husher's infrastructure deliberately does not include.

User Responsibilities

The user-side behaviors that determine whether a swap is safe.

Risk Disclosures

External risks that the non-custodial model cannot eliminate.

Related Documentation

Privacy model, failed transactions, FAQ, and support contacts.