Sato Check · Package

hyperliquid-python-sdk

pypi:hyperliquid-python-sdk · v0.24.0 · sha256:b3fba7c53f4f · as of 2026-09-29

Does it take your key?: No private-key read found in what we read of its setup and published code — the limits say how much that was.; Our static read of the published artifact found it.
Does your key leave?: Not yet run — we have not run this version with planted test keys.; No evidence line on file for this question yet.
Can it move funds on its own?: Unknown — we could not read what it exposes.; No evidence line on file for this question yet.
What changed?: First profile of this subject — nothing to compare yet.; No evidence line on file for this question yet.

Hosts contacted

Host	When	Role	Evidence
api.hyperliquid-testnet.xyz	code	other	traced
api.hyperliquid.xyz	code	other	traced

Evidence (3 lines)

tracedT-hosts2026-09-29
api.hyperliquid-testnet.xyz appears in shipped code (other).
hyperliquid/utils/constants.py
tracedT-hosts2026-09-29
api.hyperliquid.xyz appears in shipped code (other).
hyperliquid/utils/constants.py
tracedT-key-handling2026-09-29
Turns key material it is GIVEN into an account or signer (eth_account.Account.from_key()); no read of a key from the environment or a key file was found. A signing library does this.
hyperliquid/exchange.py:637

The observed lane has not run on this version: not yet run on this version
Traced analysis follows flows inside one module only; a key handed from one module to another is not followed.
The observed lane has not run on this version.
No tool inventory was available, so fund actions were not read.
Traced: Python read line by line, not parsed.

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-1

Maintain this project? Respond to this reading

Loading sign-in…