Hyperliquid API wallet mistakes we keep seeing
2026-08-27 · VireHyperliquid-style API wallets are delegated signers. The main wallet holds funds. The API wallet signs. Confusing those roles is the fastest way to “it should work” debugging at 2am.
Mistakes
- Generating a random private key offline and expecting the venue to honor it without authorization
- Putting the main wallet key on the bot host “just for a minute”
- Funding the API wallet and wondering why margin lives elsewhere
- Skipping dry-run because “the key is a trading key so it must be fine”
- Pasting keys into group chats, tickets, or screenshots
Working pattern
Authorize an API wallet in the official UI flow. Store only that key in a secret manager or host env. Keep funds on the main wallet. Bot process signs; it does not become your cold storage.
Agent note
Vire will not take custody of your main wallet and will not ask you to paste a seed phrase into chat. If a vendor needs that, leave.