Is Lighter safe to connect?
Exchange · Lighter zk-rollup settling to Ethereum (zkLighter), Perpetual futures and spot markets. Checked 2026-10-29; every line links its source.
Worst case: Your funds sit in Ethereum contracts with a proven state, but one operator runs the exchange: an outage like the 4.5-hour one during the Oct 2025 crash can stop you managing positions, a forced exit only opens after 14 days, ADL can close profitable positions early, and L2BEAT says the team can upgrade the contracts instantly. A leaked API key can trade your account into losses (it can only withdraw to your own address), while a leaked L1 wallet key can move everything.
Safe setup in 3 steps
- Run each bot on its own sub-account with its own API key index (4-254), and keep the L1 wallet's private key off the bot server: without it a key cannot send funds to other addresses
- Give dashboards, tax tools and AI agents a read-only token instead of an API key, and use separate keys per workload (maker-only keys for market-making bots if your account tier allows)
- Only use app.lighter.xyz and x.com/Lighter_xyz (fakes like lihgter-dex.xyz and fake LIT-airdrop accounts exist) and keep only trading margin on Lighter
What it can do with your money
| Who holds the keys | You hold the keys You sign with your own Ethereum wallet. Deposits sit in Lighter's Ethereum smart contracts, which 'hold the assets and the canonical state root'; the order book and matching run off-chain on Lighter's single operator/sequencer, and each batch is proven with zero-knowledge proofs on Ethereum. source |
|---|---|
| Can funds be sent out to any address? | Yes. Normal 'secure' withdrawals go back to the Ethereum address that created the account. If the sequencer ignores you, you can post a priority (forced) transaction on Ethereum; if it is not processed within 14 days, anyone can trigger the escape hatch ('desert mode'), which freezes the L1 contract and lets users withdraw by submitting a zero-knowledge proof of their balance. The desert-exit circuit was audited by zkSecurity (report dated 2025-11-05, https://reports.zksecurity.xyz/reports/zklighter-desertexit), but L2BEAT notes its source code is not public. source |
| Can it hold or freeze your funds? | No KYC-style account freeze is described, but Lighter's terms let it 'suspend or terminate your access to the Interface' without notice (https://tostracker.app/document/elliotai-tos). The escape hatch only kicks in after a 14-day forced-transaction deadline, so funds can be stuck for up to two weeks if the operator stops or censors. L2BEAT rates Lighter Stage 0 (May 2026): the team controls the contract upgrade path, and L2BEAT's project page says contracts are instantly upgradable, so a malicious upgrade could steal funds before users exit (https://pr11267-production.previews.l2beat.com/scaling/projects/lighter, preview build). source |
| What a leaked API key can do | Each API key is its own key pair with its own nonce, bound to one account index (master account, sub-account or pool). Indexes 0-3 are reserved for Lighter's web and mobile apps, so bots use 4-254. Registering a key needs an L1 wallet signature (ChangePubKey). An API key can trade, cancel, modify orders, change leverage/margin, manage sub-accounts, make 'secure' withdrawals (only to the account's own L1 address) and same-owner transfers. It cannot, without the L1 wallet signature, transfer to a different owner, make fast withdrawals or approve an integrator with fees. Auth tokens made from the key last at most 8 hours; the docs give no expiry for the API keys themselves. Read-only tokens (1 day to 10 years) can read data but not trade or withdraw, and Lighter recommends them for dashboards and AI agents. Premium/Advanced accounts can mark keys maker-only (post-only orders, modify and cancel only). source |
Official links
- Website:
lighter.xyz - X:
@Lighter_xyz
Where we confirmed these
Known fakes
lihgter-dex.xyz· 2026-01-02 source
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2026-02-25 | ARC perpetual long squeeze: a whale's ~$50M open-interest long was liquidated and auto-deleveraging (ADL) partially closed profitable shorts | ~$8.2M whale loss; ~$75K LLP loss | LLP loss capped by the per-market risk bucket; Lighter set a $40M open-interest cap on ARC and said similar caps may apply to other assets | source |
| 2025-12-30 | GoPlus warned of phishing disguised as LIT airdrop claims and eligibility checks, pushed by numerous fake X accounts impersonating Lighter (no specific handles or domains named) | losses not reported | source | |
| 2025-10-10 | About 4.5-hour outage during the market-wide crash: a database upgrade problem left the single sequencer unable to process trades, so users could not manage positions and the LLP lost about 5.35% | 2,008 users lost over $1K, 367 over $10K and 38 over $100K (Lighter post-mortem) | Lighter said it would fully compensate the 2,000+ affected users in stablecoins and points | source |