Custody & key management
Aqua never takes custody and never asks for your keys. Positions run from your own wallet: a plain EOA, an MPC wallet or a smart-contract wallet such as a Gnosis Safe, including multisig setups where transactions queue until enough co-signers approve. Key management stays wherever it lives today, in your own wallet policy: providing liquidity changes nothing about who can sign.
One allowance, capped and revocable
The only permission you grant is a standard token allowance to the Aqua contracts, set per token and per chain. It caps what a fill can move, and the balance actually in your wallet is the binding limit. There are no blanket permissions and no custody handover: revoke the allowance and nothing can move again.
How revoking works
- 1
Revoke from the Aqua overview
Each token you granted an allowance for shows up in your Aqua overview with a revoke action on its row.
- 2
Or use any allowance tool
The allowance is a standard on-chain approval, so any allowance-management tool you already use works the same way.
- 3
New fills stop instantly
Revoking stops new fills the moment it confirms. Positions stay configured but can no longer move tokens. Closing them is a separate one-transaction action that moves nothing.
Audited by eight firms
1inch Aqua and the SwapVM engine have been audited by OpenZeppelin, Bailsec, Hexens, Nethermind, Theori, Decurity, Hashlock and MixBytes. Every position is an immutable, hash-addressed config, so what you sign is exactly what the engine executes.
The risks that remain
- Prices can move against your range: impermanent loss applies, and a position can end up holding more of the weaker asset.
- Swaps, and therefore swap fees, are not guaranteed. Treat APR as an observation, not a promise.
- Smart-contract risk exists in any on-chain system, audits included.
- Underfunded is not liquidated: a position whose backing runs low simply stops filling until the wallet is topped up.
