Security: what Wispy asks you to sign

Last updated 5 November 2026

Wispy is a non-custodial trading app: Solana coins, leverage on Hyperliquid, and a social feed. It never holds anyone's money and never sees anyone's keys. Every transaction is built by the official API of an established protocol (Jupiter, Hyperliquid, Relay) and signed by the person in their own wallet, which shows the amount and the destination before they confirm. This page lists every request Wispy can send to a wallet, so anyone (a user, a wallet, a security company) can check it.

Wispy was called Wicky until 5 November 2026. The official address is www.getwispy.app; the old address, wicky.site, forwards there.

Who does what

• Sign-in and the built-in wallet: Privy (privy.io). People sign in with Google, X, email or a passkey, or connect a wallet they already have (Phantom, Solflare, MetaMask and others). The built-in wallet's keys are created and kept by Privy in secure hardware; Wispy can't read or use them, and the person can export them at any time. Privy only accepts sign-ins on Wispy's own addresses.
• Swaps on Solana: Jupiter (jup.ag), through its official API (api.jup.ag, swap order and execute).
• Limit orders, take profit and stop loss on coins: Jupiter Trigger (api.jup.ag/trigger/v2).
• Leverage: Hyperliquid (hyperliquid.xyz), through the open-source @nktkas/hyperliquid SDK.
• Moving money between chains: Relay (relay.link), through its official API.

Requests on Solana

1. Swap. A transaction built by Jupiter that swaps one coin for another inside the person's own wallet. The wallet shows what goes out and the minimum that comes back.
2. Limit order, take profit or stop loss. Built by Jupiter Trigger. The coins wait in Jupiter's order program until the order fills or the person cancels; a cancel sends them back to the same wallet.
3. Send. A plain SOL, USDC or token transfer, for the amount the person types, to an address they type or to the main wallet of a Wispy @name they pick.
4. Moving dollars to leverage, to another chain, or out. A Relay deposit built by Relay's API for the amount the person types. The money arrives at the person's own address on the other chain, or at the address they typed when withdrawing.
5. Wispy Premium (optional). The only payment that goes to Wispy: one month of an optional subscription for social features, in SOL or USDC, to Wispy's address, with the memo wispy-premium:<order> (wicky-premium: before 5 November 2026). It never renews by itself; each month is a new payment the person confirms. It can also be paid from another chain through Relay, which delivers it to the same address.

Requests on EVM chains (MetaMask and others, or the built-in wallet's EVM side)

6. Deposit to leverage. An ERC-20 transfer (not an approval) of USDC on Arbitrum (0xaf88d065e77c8cC2239327C5EDb3A432268e5831) to Hyperliquid's official Bridge2 contract 0x2Df1c51E09aECF9cacB7bc98cB1742757f163dF7, for the amount the person types (at least 5 USDC, Hyperliquid's minimum).
7. Hyperliquid "approve agent". One EIP-712 signature, once, that lets a trading key created in the person's browser place and cancel orders on their own Hyperliquid account. On Hyperliquid an agent key can't withdraw or transfer money. The key never leaves the browser.
8. Hyperliquid withdrawal (withdraw3) to the person's own address.
9. Adding money from another chain, and buying or selling coins on Base and other EVM chains. Built by Relay. When the person pays with an ERC-20 token, Relay's quote includes an approval for exactly that amount to Relay's contract (for example, paying 20 USDC on Arbitrum approves 20 USDC to 0x4cd00e387622c35bddb9b4c962c136462338bc31), followed by the deposit; Relay sometimes adds its "authorize" signature, which moves nothing. Never an unlimited approval. The money arrives in the person's own Wispy wallet.
10. Moving dollars back from leverage. Two EIP-712 signatures, no gas: Relay's "authorize" signature (it only tells Relay which deposit belongs to the person and moves nothing), and a Hyperliquid transfer of the exact amount to Relay, which then delivers USDC to the person's own Solana wallet.

Messages that move no money

To link a wallet to a profile, to the leaderboard, or to receive money sent to an @name, Wispy asks for a plain-text message signature. Each message starts with "Wispy" (or "Wicky" before 5 November 2026), says what it is for, says "This moves no money and costs nothing.", and contains the wallet address, the profile id and the time. It can't be used to move funds.

What Wispy never asks for

• Seed phrases, recovery phrases or private keys, ever, anywhere.
• Unlimited token approvals, setApprovalForAll, or Permit / Permit2 signatures for open-ended amounts.
• "Claim", "airdrop" or "verify your wallet" signatures. Wispy has no token, no airdrop and no presale; anything called WISPY is not ours.
• Transfers to Wispy, apart from the optional Premium payment above.

Other protections

• A strict Content-Security-Policy: scripts load only from Wispy's own domain (plus Cloudflare Turnstile), so no third-party script can change what a transaction contains.
• A red-flag check on every coin before buying (mint and freeze authority, liquidity, top holders, creator history, organic activity, verification).
• A device joining an account with a one-time code can't become the main wallet, or receive merged money from the others, for 24 hours. Link codes are stored only as a one-way hash, work once, expire after 10 minutes, and wrong guesses are limited.
• Trades and account data are stored with Supabase in the EU; nothing on Wispy's server can sign for anyone's wallet.

Official accounts and contact

Website: www.getwispy.app (and wicky.site, which forwards to it). X: @Wispy_xyz. TikTok: @wispy_xyz. In the app: @wispyofficial. Anything else using our name is not us.

Found something that looks wrong, or a site pretending to be Wispy? Write to wickyapp@proton.me.