The custodial vs non-custodial trading bot question sounds like a technicality, but it's the single decision that most determines whether your funds are safe. It comes down to one question with a binary answer: when the bot is trading, who actually holds the keys to your money? Everything else — fees, speed, features — is secondary to that. A bot can have the best fills on Solana and still be the wrong choice if it can lose or freeze your capital.
This post defines both models plainly, explains what custody means for your keys, walks through the specific risks of custodial bots, shows how a non-custodial PDA vault works, and gives you a quick test to tell which kind you're actually using.
What "custodial" and "non-custodial" mean
A custodial trading bot holds your funds for you. You deposit SOL into a wallet the service generates and controls; the bot trades from that wallet; and to get your money back, you request a withdrawal that the service has to honor. Most Telegram trading bots work this way — it's why they feel so frictionless. The catch is that "the service controls the wallet" means the service controls your money.
A non-custodial trading bot never takes possession of your funds. Your capital stays in a wallet or on-chain account that you own. The bot is granted a narrow, specific permission — the ability to execute trades — but it cannot move your funds out to itself. You keep the keys; the software only gets to trade.
The distinction isn't about how the trades look on-chain. Both kinds buy and sell the same tokens. It's entirely about who can take your money and who can't.
What custody means for your keys
In crypto, ownership is the private key. Whoever holds the key controls the funds — full stop. "Not your keys, not your coins" is a cliché because it's true.
When you deposit into a custodial bot, you hand over effective control of your keys. You're trusting the operator to:
- keep those keys secure from hackers,
- stay solvent and in business,
- and choose to process your withdrawal when you ask.
Each of those is a point of failure that has nothing to do with whether the bot trades well. You could pick winning wallets, execute perfectly, and still lose everything if the custodian fails on any one of them. Non-custodial models remove all three risks at once, because there's nothing to fail: the operator never holds the key in the first place.
The risks of custodial bots
Custodial convenience carries real, recurring downsides — these aren't hypotheticals, they're the standard failure modes of the category:
- Exit scams. A custodial operator that holds everyone's deposits can simply disappear with them. It has happened repeatedly across crypto, and a copy-trading bot with a pooled treasury is a tempting target.
- Hacks. A wallet holding many users' funds is a honeypot. If the operator's keys are compromised, depositors pay for it. Your personal security hygiene is irrelevant — you're exposed to theirs.
- Frozen or delayed withdrawals. Even an honest operator can pause withdrawals — during volatility, after a security incident, or because of a banking or compliance issue. While they're paused, your money is stuck and you can't trade or exit.
- Opaque internal accounting. When funds are pooled, you're trusting the operator's ledger that you own what they say you own. You can't independently verify your balance on-chain.
None of this means every custodial bot is a scam — many operate honestly for years. But you're accepting a category of risk that simply doesn't exist in the non-custodial model, in exchange for convenience.
How non-custodial PDA vaults work
On Solana, the cleanest non-custodial design uses a Program Derived Address (PDA) vault — and it's how Soltrace works, so it makes a concrete example.
When you start with Soltrace, you deposit SOL into an on-chain vault that is yours. That vault is a PDA: an account controlled by the program's rules rather than by a private key the operator holds. Two permissions matter, and they're deliberately separated:
- Trade authority — the Soltrace engine is granted permission to execute swaps from your vault. This is what makes copy trading work: when a leader trades, the keeper-signed engine can mirror it from your vault.
- Withdrawal authority — this stays with you. The engine is never authorized to move funds out of the vault to itself. You can withdraw your SOL back to your own wallet at any time.
The result is automation without surrender. The engine can trade on your behalf all day, but it structurally cannot abscond with your capital, because the on-chain program only ever grants it trade authority. There's no pooled treasury to exit-scam, no operator wallet to hack, no withdrawal queue to freeze — your funds were never in someone else's custody to begin with.
How to tell which one you're using
You don't need to read code to figure out which model a bot uses. Ask these questions:
- Where did your funds go when you deposited? If you sent SOL to a wallet the bot generated and controls, it's custodial. If your funds stayed in an account you own (or a vault tied to your own wallet), it's non-custodial.
- Can you withdraw unilaterally, right now, without anyone's approval? If withdrawal is a request the service fulfills, it's custodial. If you can move your funds yourself on-chain whenever you like, it's non-custodial.
- Can you verify your balance on-chain? Non-custodial vaults show up as an account you can inspect in a block explorer. Pooled custodial balances are just numbers in the operator's dashboard.
- What permission did you actually grant? Non-custodial tools ask for trade authority, not the keys to your wallet. If setup involved handing over a seed phrase or private key, that's custodial in the most absolute sense.
If the honest answers point to custodial, that's not automatically disqualifying for small, disposable size — but go in with eyes open. For anything you'd be upset to lose, the non-custodial answer to "who holds your keys?" should be you. Choosing a non-custodial tool is the first step in how to copy trade on Solana for exactly this reason.
That's the whole philosophy behind Soltrace: copy trading that's fully automated, but from a vault that never leaves your control. If keeping custody matters to you, you can start with Soltrace — or, if you're still mapping the landscape, see how the models stack up among the best Solana copy trading bots.