Build your own bot → safety

Is the SettleMath Bot safe?

Plain answers: what the app does with your money and your keys, what it can’t do, and what can still go wrong. If you don’t trust it with your key, don’t use it: the bot’s trades are public on settlemath.app/bot, and the app only auto-trades those.

What it does, and what it doesn’t

• It listens to SettleMath for the bot’s buys and, in Live mode, places the same buy on your Kalshi account with your key: the same market, the same side, at the bot’s price plus 1¢ at most.
• It reads your balance, your fills and each market’s result, and places only the bot’s own buys, Up or Down, on the 15-minute crypto markets (it refuses any other market). There is no code in it that withdraws or moves money.
• It talks to two places only: settlemath.app (the bot’s buys, your Pro, your referral numbers and, if you turn it on, your results for the board) and Kalshi. The Python version also installs its free add-ons from Python’s own package index the first time.
• SettleMath never trades for you and never receives your Kalshi key.

Your keys

• They stay on your computer, in a settings file in your home folder. On Windows they’re encrypted with your Windows account, so the file is useless on another computer or account (in the rare case Windows can’t encrypt them, they’re kept as they are in your own user folder); elsewhere the file is readable by you only.
• They’re hidden in the app until you press Show keys. Forget my keys deletes them.
• Make a Kalshi key just for this app. If your computer is lost or you stop using the bot, delete that key on kalshi.com (your profile → API Keys): it stops working at once. Your SettleMath key can be replaced on your account page.
• Download the app only from settlemath.app. Never run a copy someone sends you, and never share your settings file.

Limits you set

• Practice mode buys nothing; Test checks your keys and buys nothing. There’s also a Kalshi demo option with fake money.
• Dollars per trade, or size like the bot: your amount on the bot's most confident buys and less on the others, in the same proportion as the bot's own.
• A daily loss limit, a daily profit target, a pause after a number of losses in a row, a loss limit and profit target for the whole run, and a timer (stop after a number of hours: always, only if up, or only if down).
• Stop works at once; closing the app stops it too.

What protects you by itself

• It never copies a buy more than 10 seconds old, and buys each market once at most.
• If the computer sleeps, it buys nothing while asleep; when it wakes, the app reconnects and carries on (Stop it first if you don’t want that).
• Every order is fill-now-or-cancel: nothing is ever left waiting on Kalshi. An order that gets no answer is never sent twice; its result is looked up later.
• If the app freezes, crashes or the computer shuts down, nothing more is bought, and it tells you the next time you open it.
• If you set a losing-streak pause, it stops buying once that many trades in a row have settled as losses (a trade already bought while the last one was settling still runs).
• Only one copy runs per computer and one connection per key, so nothing is bought twice.
• It stops by itself if your Pro ends, and tells you when a newer version is out.

What can still go wrong

• Trades lose. Each trade can lose everything you put in it. The bot’s record on /bot is not a promise, and losing streaks happen.
• Your results won’t match the bot’s to the cent. A fast price can be gone (then nothing is bought), you pay Kalshi’s fee, and your timing is a second or so after the bot’s.
• The daily limits aren’t a hard wall. They’re checked before each buy and every 30 seconds, from your balance; a trade already bought settles on its own, so a day can end a little past a limit.
• It needs your computer and your internet. If either is off, asleep or down, or Kalshi or SettleMath is, it misses those markets (it never catches up late).

Checking the files

The Python version is one readable file: open it in any text editor to see exactly what it does. The Windows app is the same file packaged with Python by GitHub’s build servers, so it needs no install. Windows warns about it because it isn’t signed with a paid publisher certificate (More info → Run anyway). To check that a file you have is ours, compare its SHA-256 (Windows: certutil -hashfile SettleMath_Bot.exe SHA256; Mac: shasum -a 256 SettleMath_Bot.pyw) with:

• SettleMath_Bot.pyw (version 6.2): f5560a9b2a130398f484b3106832ff78521f2626487d7053224932e0444fb95f
• SettleMath_Bot.exe (version 6.2): fb5452381af69dcaee8e76b04cf73b6a15b09b97b862cc8b432bd2f91852a56d

Information, not advice. You run the app on your own account, provided as-is; see the Terms. Only trade money you can afford to lose.