What happens to your money,
and who can move it.
Everything below is a fact about how this is built, including the parts that are a risk we carry rather than one we have removed. If you are deciding whether to put real money behind an agent, this is the page to read first — it is above pricing on purpose.
Vaeron is custodial.
An agent has to sign a transaction to place a bet, so something has to hold a signing key, and that something is us. We say it plainly because the alternative phrasing — we never store your recovery phrase — is true and reads as though nobody but you can touch the money. Both halves are true and they only mean something together.
- Where does money sit?
- In Solana wallets. Your account wallet is what you deposit into and withdraw from. Each live agent has its own wallet, funded from the account wallet, so a bad run can only cost what was put behind that one idea.
- Who holds the keys?
- Each wallet is generated from a recovery phrase shown to you once and never stored — you can restore that wallet in Phantom or Solflare without us. We keep the derived signing key, encrypted, because the agent cannot trade without it.
- Is it pooled with anyone else’s?
- No. One wallet an agent, one account wallet an account, each with its own key. Nothing is netted between accounts.
- What about the venue?
- Trades are placed on Jupiter, on Solana. While an order is open its stake sits in the venue’s own contract, not in ours — and a settled position pays out there and is swept back to the agent’s wallet.
The risk we carry
Custody means what it means everywhere: a compromise of our infrastructure is a risk you are taking, and we would rather say so than bury it. Signing is kept apart from the website and confined to a fixed, deliberately narrow set of actions that cannot be widened from a browser — but no arrangement removes that risk entirely. It is the price of an agent that can trade while you are asleep, and practice mode carries none of it, which is why it exists and why it is free.
One wallet, one strategy,
limits you approve.
An agent is not given an account. Every order it proposes is checked against those limits by a separate gate before anything is signed.
- What can it trade?
- Only the markets its strategy covers, inside the price band it was given, up to the stake per trade you set. It cannot move money between agents, cannot deposit, and cannot withdraw.
- What are the limits?
- Stake per trade, most it may hold in one market, most across one event, most at risk at once, and an optional daily loss limit that stops it for the day. All of them are stated in words on the confirmation before an agent starts, and changeable on the agent’s own page afterwards.
- How do I stop it?
- Pause on the agent, or Pause all, which stops every agent on the account at once. A pause stops it searching; it does not sell what is already open, because closing a book is a separate decision about every position in it.
- Can it start itself?
- No. A live agent is created switched off. It trades only after you have funded its wallet and pressed Start, and both are checked on the server rather than in the browser.
- Does it ask me before each trade?
- No — that is the point of it. It trades continuously inside the limits you approved, and every order, refusal, price and fee is recorded where you can read it.
What you pay is not
always what was quoted.
Worth knowing because it explains most of what looks odd on a statement: a partially filled order is normal rather than a fault.
- The agent prices a market from the venue’s live order book — not from the listing quote, which is advisory.
- The risk gate checks the order against the agent’s limits. A refusal is recorded with its reason.
- The order is created at the venue, which takes the whole wager up front.
- The book fills what it can at your price. The rest is refunded automatically and the position is recorded at what was actually bought — so a $10 order can become a $3 position at the same price.
- An order that could barely fill at all is refused rather than signed: a sliver is not a bet, and it costs a fee either way.
- When the market settles, the payout is swept back into the agent’s wallet and the fee, if one is owed, is worked out then.
- What does the venue charge?
- Jupiter takes its own fee on each fill, largest on markets priced near 50c and smaller towards the edges — about 5% at most. That is the venue’s, not ours, and it is charged whether the bet wins or loses.
- What is the smallest order?
- $5. Below that the venue will not accept it.
- What if the venue is down?
- The agent skips that pass and tries again on the next one. Nothing is retried blindly: an order that cannot be confirmed is reconciled against the chain before anything else is placed.
- What if a settlement is wrong?
- Settlement is the venue’s. What we can do — and do — is settle from the chain rather than from our own expectation, so the recorded result is what happened on it.
5% of a win, and only
once the agent is ahead.
We take a share of the part of a win that leaves the agent above everything you have put into it, and nothing at all while it is behind. Each agent is measured on its own. A fall and a recovery are charged again — the deposit is the only floor. The worked ledger on the pricing page runs the rule itself and shows every step, including that one.
- When is it taken?
- At settlement, from the agent’s own wallet, and only once the amount owed passes a dollar.
- Is there anything else?
- A swap between SOL and USDC in your wallet costs 1%, shown before you confirm it. No monthly fee, no fee to sign up, no fee on a deposit and none on practice. The venue’s own fee is separate and goes to the venue.
- What about referrals?
- A referrer keeps a share of our fee — 25% of the 5% we charge on a win at the first tier, up to half of it at the top: $1.25 to $2.50 of every $100 won. The person they invited pays exactly what they would have paid arriving alone.
Your money is yours.
No lock-up.
What stands between a withdrawal and a mistake is deliberate friction, because a Solana address has no checksum and a payment to a mistyped one is gone.
- You enter a destination and an amount, and are shown the parsed address and the exact amount to read back before anything moves.
- A withdrawal passphrase — separate from your sign-in, and rate limited — has to be entered. There is no path to money that skips it. Setting it the first time needs a fresh sign-in.
- Money only goes to an address in your withdrawal addresses. A new one needs your passphrase, then waits 24 hours on your Wallet page before it can be used — so a stolen session cannot add its own address and empty the account the same minute.
- A daily limit on withdrawals, $2,500 unless you change it. Lowering it is immediate; raising it waits 24 hours.
- Every change to these, and every withdrawal, is emailed to you as it happens, with a button that locks the account: nothing can leave it until you unlock it with your passphrase, which takes 24 hours, and every session on it is signed out.
- An address that looks like one of ours, or like a near-copy of an address in your own history, is refused. That attack is real and has been attempted on this deployment.
- The signer checks all of the above again itself, then signs and sends. The transfer appears in your history with its transaction reference.
- What can I withdraw?
- Whatever is in the account wallet. Money inside an agent’s wallet comes home when you take it off that agent; money in an open position comes back when the position settles.
- How long does it take?
- As long as Solana takes, which is seconds. If a transfer fails to confirm it is reported as failed rather than assumed — the balance is read from the chain, not from our record of it.
Nobody here has
your password.
- Who holds my password?
- Nobody here. Sign-in is handled by Clerk, which owns the credential; this app never sees a password and cannot reset one.
- How are keys stored?
- Encrypted with AES-256-GCM, under a key derived per account from a master key held only by the signer — never by the website, and never beside the data. A tampered record fails to decrypt rather than producing a usable key. Plaintext keys exist only in the signer’s memory, only while signing, and are never logged or returned by any endpoint.
- What will the signer sign?
- Only what a transaction says it is: every one is checked before it is signed, and anything that would move money outside the rules on this page is refused and alerted on. Whoever asks — the website, an agent, or anyone at Vaeron — money leaves your wallets only for an order, to you, or as the fees described above. How those checks work is deliberately not published.
- What about my recovery phrase?
- Shown once, never stored, and it cannot be shown again. If you lose it you have not lost the wallet — we can still sign for it — but you have lost the ability to take it elsewhere without us.
- Will anyone from Vaeron ask for it?
- Never. Not the phrase, not your withdrawal passphrase, not your password. Anybody who does is not us.
- Something looks wrong. What do I do first?
- Pause all, on the Lab or the Squadron. It stops every agent on the account at once and leaves open positions alone, so it costs nothing if the alarm turns out to be nothing.
Jupiter, on Solana.
Prediction markets are not available everywhere, and it is your responsibility to know whether they are available to you. Nothing here is financial advice, no past measurement predicts a future one, and you can lose money — including all of what you put behind an agent.