# Is Bitsgap safe? Check before you connect

> Bitsgap: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-26.

Canonical: https://tradingagentstack.com/check/bitsgap/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Bitsgap

# Is Bitsgap safe to connect?

Web trading terminal · Binance, Bitget, Bitfinex, Coinbase (Advanced), Crypto.com, Gate.io, Gemini, HTX, Hyperliquid, Kraken, KuCoin, OKX, Poloniex, WhiteBIT, Aster, EVEDEX. Checked 2026-10-26; every line links its source.

**Worst case:** Bitsgap holds API keys that can trade on your exchange account. It refuses keys with withdrawal rights, so a leak or phishing attack cannot withdraw your coins directly, but an attacker with the key can place trades that drain value from your balance. Bitsgap's terms cap its liability at the lower of AED 5,000 or three months of fees.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Open Bitsgap only at bitsgap.com or its official apps (App Store id1407713776, Google Play com.bitsgap.pwa), and turn on 2FA or a FIDO2 security key for Bitsgap and your email, as Bitsgap's security page advises. Get support only via support@bitsgap.com or the in-platform chat, since Bitsgap says its socials are not support channels.

2. Create the exchange API key with read and trading permission only and withdrawals off (Bitsgap rejects keys with withdrawals enabled), and add Bitsgap's trusted IP addresses, copied from the Manual Replace or Fix window, to the key's whitelist on the exchange.

3. Re-check the key's permissions every time you connect it, as Bitsgap's blog recommends, and never paste API keys, passwords or seed phrases into Bitsgap's AI Chat; its terms forbid entering credentials there.

## What it can do with your money

| Who holds the keys | The exchange holds your funds Your coins stay in your own exchange accounts. Bitsgap says it 'connects through secure API keys only — we never move or hold your funds' and 'Your assets remain in your own exchange accounts at all times.' Bitsgap stores the API keys that let its bots trade; it says passwords and API keys are always encrypted (RSA 2048 per its help center). These are Bitsgap's own claims. [source](https://bitsgap.com/security) |
| --- | --- |
| Can funds be sent out to any address? | No. Bitsgap refuses API keys that have withdrawal permission: its error-status article says 'The API key can't be used because the withdrawal permission is enabled', and its blog says such keys 'are rejected automatically on connection'. A trade-only key can still be misused to place bad trades on your balance; Bitsgap's blog warns a compromised key 'can still be misused within its trading scope, for instance to manipulate a thin market.' [source](https://bitsgap.com/ja/helpdesk/article/10044910693020-API-Key-Error-Statuses) |
| Can it hold or freeze your funds? | This covers the Bitsgap service, not your exchange funds. Bitsgap's terms let it suspend your account until the cause is fixed and suspend or end the service 'at any time without notice'. It caps its liability at the lower of AED 5,000 or the fees you paid over three months. The terms page shows no last-updated date. [source](https://bitsgap.com/terms-conditions/tnc) |
| What a leaked API key can do | Bitsgap needs read (trade history, balances) and trading permission, and rejects keys with withdrawal enabled. For Binance its guide says to enable Reading, Spot & Margin Trading and (optionally) Futures. Binance, KuCoin, Kraken and Crypto.com require IP whitelisting for Bitsgap. You copy Bitsgap's trusted IP addresses from its Manual Replace or Fix window and add them to the key on the exchange; the addresses are not published in the help text. 'API Account Lock' blocks the same key from being used on more than one Bitsgap account and emails the account it is already linked to. [source](https://bitsgap.com/en-AU/helpdesk/article/9948309520924-Updating-API-Key-Permissions-with-Trusted-IP-Addresses) |

## Official links

**Not fully confirmed.** Some of these links were confirmed in only one place, so treat them with care.

- Website: `bitsgap.com`

- X: `@Bitsgap`

- App: `https://apps.apple.com/app/id1407713776`

- App: `https://play.google.com/store/apps/details?id=com.bitsgap.pwa`

Where we confirmed these
- https://bitsgap.com (vendor homepage: links App Store id1407713776 and Google Play com.bitsgap.pwa, t.me/Bitsgap_news, YouTube, Facebook; meta tags name @Bitsgap; lists 16 exchanges: Aster, Binance, Bitfinex, Bitget, Coinbase Advanced, Crypto.com, EVEDEX, Gate.io, Gemini, HTX, Hyperliquid, Kraken, KuCoin, OKX, Poloniex, WhiteBIT)

- https://bitsgap.com/helpdesk/article/10024820752540-How-to-follow-Bitsgap-updates-and-news (vendor list of official channels: twitter.com/Bitsgap, t.me/bitsgap, discord.com/invite/PwdsEsp4j8, reddit.com/r/Bitsgap, youtube.com/@bitsgap and others; says social profiles are 'not for customer support purposes'; support is support@bitsgap.com and in-platform chat)

- https://apps.apple.com/app/id1407713776 ('Bitsgap: Crypto Trading Bots', seller Bitsgap Holding OÜ, privacy policy on bitsgap.com, v2.11.11)

- https://play.google.com/store/apps/details?id=com.bitsgap.pwa ('Bitsgap: Crypto Trading Bots', developer Bitsgap Holding OU, developer website https://bitsgap.com/, email support@bitsgap.com, 50K+ downloads, updated 2026-08-12)

- https://www.quicknode.com/builders-guide/tools/bitsgap-bitsgap-software-solutions (third-party directory: website bitsgap.com, X x.com/Bitsgap)

- https://www.cbinsights.com/company/bitsgap (third-party: website bitsgap.com, founded 2017, HQ Tallinn, Estonia)

## Incidents

None found in official sources or reputable reporting for 2024 to 2026. That doesn't prove nothing happened.

## Check a link

Got a link, @handle or repo that claims to be Bitsgap? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Bitsgap

We email you if we add an incident, a freeze report, a known fake or a deadline for Bitsgap. Free; unsubscribe anytime.

## More checks: Web trading terminals
[GMGN](https://tradingagentstack.com/check/gmgn/)[Photon](https://tradingagentstack.com/check/photon/)[BullX Neo](https://tradingagentstack.com/check/bullx-neo/)[Axiom](https://tradingagentstack.com/check/axiom/)[Padre](https://tradingagentstack.com/check/padre/)[Fomo](https://tradingagentstack.com/check/fomo/)[Genius Terminal](https://tradingagentstack.com/check/genius-terminal/)[Based](https://tradingagentstack.com/check/based-one/)[HyperDash](https://tradingagentstack.com/check/hyperdash/)[Insilico Terminal](https://tradingagentstack.com/check/insilico-terminal/)[Moonshot](https://tradingagentstack.com/check/moonshot/)[Ave.ai](https://tradingagentstack.com/check/ave-ai/)[3Commas](https://tradingagentstack.com/check/3commas/)[OctoBot](https://tradingagentstack.com/check/octobot/)[DEXTools](https://tradingagentstack.com/check/dextools/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)