PerpFarm is free to use and non-custodial. Your trading keys live in your browser, not on our servers, and our revenue comes from referral fee-shares the DEXs pay us out of their own fees — not from charging you. This page explains exactly how that works, including the parts that aren't perfect.
When you sign in, you sign one message with MetaMask. Your browser — not our server — computes a deterministic trading key from that signature. The same MetaMask wallet always produces the same trading key, on any device, so you can recover it anywhere without trusting us to hold it.
The trading key is derived and used entirely inside your browser tab. It is never written to disk or sent over the network.
For convenience, your browser uploads one thing to the server: a backup of your trading key encrypted
with AES-256-GCM. The encryption key is derived from your MetaMask signature — something
only your wallet can produce. The server stores the ciphertext and a random nonce, nothing else.
Without your MetaMask signature it is mathematically incapable of decrypting the backup. This isn't a
policy promise; it's how the math works. (And because the key is deterministic, you don't even need the
backup — you can always re-derive it from MetaMask.)
Trades are signed in your browser using the native format of each DEX, and the server only relays the result:
A few on-chain DEXs have flows we can't fully run in a browser yet. For Avantis, Ostium, Aster, Lighter, and Ethereal, some operations (like complex multi-step deposits or SDK-driven order execution) are executed server-side — using per-user API/agent keys scoped to trading, or a key your browser supplies for that specific request and that we don't retain.
These scoped credentials can place trades on that one venue but are not your MetaMask key and cannot empty your wallet; withdrawal protections still apply. We're moving these flows client-side over time, but we'd rather tell you the current state plainly than pretend the model is purer than it is.
Open DevTools → Network while you trade. Search every request for your trading key. You won't find it — only JWTs and pre-signed payloads ever leave the browser.
The signers are plain, unminified JavaScript served from this site (/js/). View-source and confirm the key derivation and signing happen locally.
The full architecture — key derivation, backup encryption, per-DEX signing formats — is documented in detail in the security docs.
The server is a coordinator, not a custodian. Here is the exact boundary — the same one that would apply to an attacker who fully compromised our infrastructure.
PerpFarm registers a referral, builder, or broker code with each DEX. When you trade, the DEX pays PerpFarm a slice of its own trading fee. In almost every case you pay exactly the same rates as trading on the DEX directly — the fee-share comes out of the DEX's cut, not on top of it. PerpFarm charges zero fees of its own: no subscriptions, no markups, no spread.
Referral codes are public by nature — anyone can see them on-chain or in signup URLs — so here they are.
| DEX | Program | How it's applied |
|---|---|---|
| Hyperliquid | Builder code · PERPFARMFUN | Attached per order. This is the one exception to "nothing extra": a small builder fee of 0.025% (2.5 bps) is added to each order. You approve the maximum on-chain, once, and can revoke it at any time. |
| Orderly Network | Broker ID | Set once at account registration; Orderly shares a portion of its trading fee with the broker. |
| Avantis | Referral code · pffun | Linked to your wallet address; Avantis shares a portion of its fee on your trades. |
| Aster | Referral code · c7a466 | Applied via referral link at signup; Aster shares a portion of its fee. |
| Ethereal | Referral code · 8MW2MSYS4ZPV | Passed as a parameter in your first deposit transaction — visible on-chain. |
| Paradex, GRVT, Drift, ApeX & others | Pending | Referral or broker programs exist but PerpFarm codes aren't registered yet — we earn nothing from these venues today. |
We only earn when you trade, on venues where the DEX itself funds the payout. We have no incentive to hold your funds (we can't), inflate your costs (rates match trading directly, with the Hyperliquid builder fee disclosed above), or lock you in (your key is yours — you can derive it and leave any time).
Non-custodial architecture is the foundation, but the server and transport layers are hardened too.
Sign-In With Ethereum (EIP-4361) with single-use, expiring nonces. No passwords, no email, nothing to phish or leak.
Sessions use signed JWTs with a 7-day expiry and no refresh tokens — after expiry you re-authenticate with your wallet.
A strict Content-Security-Policy blocks script injection and clickjacking; HSTS forces HTTPS on every request for a full year.
Every transaction is dry-run before broadcast. Anything that would revert — bad balance, contract error — is blocked before it costs you gas.
Trade prices are validated against independent reference feeds before execution, guarding against oracle manipulation and obviously wrong fills.
Optionally restrict withdrawals to addresses you pre-approve, with per-user daily limits and audit logging on every sensitive operation.
No architecture makes trading risk-free, and we won't claim otherwise. Client-side signing cannot protect you from malware or malicious extensions in your own browser, a phished MetaMask signature on a fake site (bookmark perpfarm.fun — never follow links from messages), a compromised MetaMask seed phrase, or exploits in the DEXs' own smart contracts. Details in the security docs.
Connect a wallet, open DevTools, and watch exactly what leaves your browser. That's the point.
Launch PerpFarm → Read the docs