# Is Shuriken safe? Check before you connect

> Shuriken: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-28.

Canonical: https://tradingagentstack.com/check/shuriken/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Shuriken

# Is Shuriken safe to connect?

Telegram trading bot · Solana, Base, BSC, Monad, Older bot (per its Telegram channels): also Ethereum, Sui, Tron and Bitcoin. Checked 2026-10-28; every line links its source.

**Worst case:** Shuriken's bot creates your trading wallet and its servers execute trades from it. If your Telegram account (which also logs you into the web Terminal), an exported private key, a trading Agent Key, a tampered extension zip or Shuriken's systems are compromised, the wallet can be traded away or emptied. The docs we read describe no PIN, 2FA or withdrawal lock to slow this down.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Start the bot only from links on Shuriken's own docs or Telegram channels (@ShurikenTradeBot as listed on t.me/ShurikenAnnouncements), log in to the Terminal only at app.shuriken.trade, and install the browser extension only from the download link in docs.shuriken.trade; never run 'Shuriken' installers from GitHub or DMs

2. Create a fresh bot wallet rather than importing your main wallet, export its private key right away and store it offline (the docs say Shuriken does not store it and staff 'will never ask for your private key'), and keep only active trading funds in it

3. Turn on Telegram 2-step verification, leave Degen Mode off, and give Agent Keys read-only access or tight dollar, slippage and wallet limits, and watch their activity in the Agent Keys dashboard

## What it can do with your money

| Who holds the keys | Not documented The bot creates a Solana or EVM wallet when you tap 'Create Wallet' and lets you export its private key ('You can export the private key of any wallet created in Telegram Bot'); you can also import a wallet by pasting its private key. The docs say 'Shuriken does not store your private keys' and that you must export and store keys before deleting a wallet, but they don't explain how the bot signs your trades without them. The Agent Kit page says trading limits are 'enforced server-side' by Shuriken, so trades run through Shuriken's servers. Wallets sync between the bot and the web Terminal. [source](https://docs.shuriken.trade/telegram-bot/wallet-management.md) [source](https://docs.shuriken.trade/agent-kit/overview.md) |
| --- | --- |
| Can funds be sent out to any address? | Yes. The docs tell you to 'transfer any remaining funds to another wallet' before deleting one, and the bot's /wallets → Transfer menu also runs cross-chain swaps (deBridge, ChangeNOW). The docs we could read describe no PIN, 2FA, withdrawal-address lock or confirmation step; 'Degen Mode' removes the confirmation step from trades. [source](https://docs.shuriken.trade/telegram-bot/wallet-management.md) [source](https://docs.shuriken.trade/telegram-bot/settings.md) |
| What a leaked API key can do | Shuriken's AI Agent Kit uses 'Agent Keys' that connect AI tools (Claude, Cursor, Windsurf, OpenClaw and other MCP clients) to your account. 'Read-only' keys can't access your wallet; trading keys can trade 'within your set limits' (dollar caps, slippage caps, allowed wallets), which Shuriken says it enforces server-side. The overview mentions no transfer or withdrawal scope; the Permissions & Safety page could not be opened. [source](https://docs.shuriken.trade/agent-kit/overview.md) |

## Official links

**Not fully confirmed.** Some of these links were confirmed in only one place, so treat them with care.

- Website: `shuriken.trade`

- Website: `docs.shuriken.trade`

- Website: `app.shuriken.trade`

- Telegram: `@ShurikenTradeBot`

- Telegram: `@ShurikenSupportBot`

- Telegram: `@ShurikenAnnouncements`

- Telegram: `@ShurikenDojo`

- X: `@ShurikenTrade`

Where we confirmed these
- https://www.quicknode.com/builders-guide/tools/shuriken-trade-by-shuriken-team (third-party directory, 'Shuriken Trade by Shuriken Team': 'A multi-chain DeFi trading platform and Telegram bot'; links x.com/ShurikenTrade and docs.shuriken.trade)

- https://t.me/ShurikenTradeBot (bot titled 'Shuriken'; description links @ShurikenDojo, @ShurikenAnnouncements, @ShurikenTradeBackupOneBot, @ShurikenTradeBtcBot, @ShurikenSupportBot)

- https://t.me/ShurikenAnnouncements ('Shuriken Announcements', 4,141 subscribers; lists @ShurikenDojo, @ShurikenTradeBot, @ShurikenTradeBackupOneBot, @ShurikenTradeBtcBot, @ShurikenSupportBot, x.com/ShurikenTrade, docs.shuriken.trade; posts 67 and 68 link app.shuriken.trade)

- https://t.me/ShurikenDojo ('Shuriken Dojo', 9,564 members; same bot, channel, X and docs links)

- https://docs.shuriken.trade/shuriken-terminal/quick-start.md (vendor docs: 'Go to app.shuriken.trade and sign in with your Telegram account')

- https://coin360.com/review/shuriken (third-party review, published 2024-10-09, updated 2026-10-01: bot t.me/ShurikenTradeBot; '@ShurikenSupportBot provides 24/7 support')

- https://coincodecap.com/shuriken-bot-review (third-party review: bot t.me/ShurikenTradeBot; 1% fee per trade)

- https://solanatradingbots.com/shuriken-how-to-use/ (third-party guide: twitter.com/ShurikenTrade, docs.shuriken.trade)

- https://madeonsol.com/compare/shuriken-vs-trojan (third-party comparison: 'Visit Shuriken' links https://shuriken.trade)

## Incidents

None found in official sources or reputable reporting for 2024 to 2026. That doesn't prove nothing happened.

## Check a link

Got a link, @handle or repo that claims to be Shuriken? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Shuriken

We email you if we add an incident, a freeze report, a known fake or a deadline for Shuriken. Free; unsubscribe anytime.

## More checks: Telegram trading bots
[Trojan](https://tradingagentstack.com/check/trojan/)[Maestro](https://tradingagentstack.com/check/maestro/)[Banana Gun](https://tradingagentstack.com/check/banana-gun/)[BONKbot](https://tradingagentstack.com/check/bonkbot/)[Bloom](https://tradingagentstack.com/check/bloom/)[Sigma](https://tradingagentstack.com/check/sigma/)[Unibot](https://tradingagentstack.com/check/unibot/)[BasedBot](https://tradingagentstack.com/check/basedbot/)[SolTradingBot](https://tradingagentstack.com/check/soltradingbot/)[MevX](https://tradingagentstack.com/check/mevx/)[Nova](https://tradingagentstack.com/check/nova/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)