> For the complete documentation index, see [llms.txt](https://docs.reachaltitude.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.reachaltitude.xyz/security-and-risk.md).

# Security and risk

## Domain verification

The official trading domain is:

```
https://trade.reachaltitude.xyz/
```

Bookmark it. Avoid sponsored search links, lookalike domains, unsolicited DMs, and browser extensions that modify transaction prompts.

## Private keys and seed phrases

Altitude's onboarding can offer wallet import. A private key or seed phrase gives complete control of that wallet.

* Never send it to Altitude support or any other person.
* Never paste it into Discord, Telegram, email, or a support form.
* Prefer a dedicated trading wallet with limited funds.
* Verify the exact domain before importing.

## Transaction review

Before signing:

* confirm network, wallet, asset, amount, and recipient;
* review token approvals and spending limits;
* verify minimum received or maximum spent;
* check gas and priority fees;
* reject prompts you did not initiate.

## Token risk

New or low-liquidity tokens can involve honeypots, transfer restrictions, high taxes, mutable contracts, concentrated supply, removable liquidity, counterfeit tickers, and manipulated volume.

Altitude security indicators are informational. No scanner can guarantee safety.

## Market and execution risk

Prices can move before confirmation. Market orders, stop orders, bridges, and liquidations can execute at worse prices than expected. Venues, RPC providers, indexers, wallets, or networks can be unavailable or delayed.

## Account security

Use multiple recovery methods where supported. Protect Telegram, email, wallet, device, and password-manager accounts with strong authentication. Review linked methods and wallets regularly.