Everything below is readable without a wallet. Connect one to see this vault’s own limits and to change anything.

Vault

Limits, status and what is visible

Program defaults · connect to read yours

Risk limits

Enforced by the program, not by this page.

Trade size10% of the spendable balance
Max per tradeentries only10%
Max slippage0.5%
Cooldownbetween entries60s
Max price age30s
Max price uncertainty1%

Exits are exempt from the size cap, the cooldown and the deviation band on purpose: a stop-loss sells the whole position, a cap can never exceed half of it, and refusing an exit because the price fell further would disarm the stop in the exact move it exists for. One stored limit — a daily loss limit — is not enforced at all; see SECURITY.md rather than reading it as protection.

On chain

Trading status

Owner-only, and unable to trap funds: withdraw never reads status.

Pausing and stopping are owner-only, so they need a connected wallet with a vault. Neither can trap funds: withdraw never reads status.

Withdrawals keep working in every state — pausing can never trap your funds. Stopping is permanent: the vault can never trade again.

Vault address—

seeds = "vault" + your address

Withdrawals go to your address only — the destination is derived, not chosen, so there is no field an attacker could point elsewhere.

On chain

Discovery

Off by default. Listing changes what is findable, not what is readable.

Listing is a write to your own vault account, so it needs a connected wallet. It is off by default, and turning it on changes what is findable — never what is readable.

Not a data class

Costs

No protocol fee. What you do pay, and to whom.

SilentEdge takes nothing
No instruction in the program can send value anywhere except back to you. That is structural, not a setting.
You pay Solana
Rent for the vault account, and a transaction fee for each deposit, withdrawal and strategy change. Fractions of a cent.
Someone pays to run it
Each evaluation and each trade costs a transaction plus a computation fee. Both are permissionless, so anyone can pay them — today that is us, and there is no mechanism that reimburses it.
The swap is the real cost
Every trade pays spread and price impact, bounded only by your own max slippage. It is charged whether or not anyone calls it a fee.
Full breakdown
What is visible

Being precise about this is the product.

Exposed · on chain

Public, on chain

Your vault, its balances, every risk limit including the trade size, every authorization and every trade. Anyone can read all of it.

Shielded · in MPC

Encrypted

Your three price thresholds, and nothing else. No single party can read them — not us, not any one node.

Exposed · inferable

Leaks over time

Every trade is a public clue about the threshold behind it. Enough trades narrow your rules to a tight range. They are unread, not unknowable.

Shielded · never sent

Never leaves this tab

The draft before you save it, and the key it is encrypted with. Not stored, not logged, not sent.

Neither · off chain, to a third party

Told to the router

Executing asks Jupiter for a route, which discloses the pending trade to Jupiter before it is submitted. Inherent to using a router, and not covered by the encryption.

Neither · governance

Upgradeable

The upgrade authority is still a single key. Until it moves to a timelocked multisig, “non-custodial” describes the deployed code and not every future version of it.

The full classification