Skip to main content

Security Best Practices

Your funds are only as safe as your security habits. Follow these guidelines to protect your AceBot wallet.

How AceBot Protects You

Encrypted Private Keys

Your private keys are encrypted with AES-256-GCM — the same encryption used by banks and governments. Keys are encrypted before storage and can only be accessed with your account.

Keys Never Shown in Chat

Private keys are never displayed in Telegram messages. This prevents accidental exposure through screenshots or message history.

Auto-Delete Sensitive Messages

When you import a wallet by pasting a private key, your message is automatically deleted to prevent it from remaining in chat history.

Token Security Scanning

AceBot integrates with GoPlus to scan tokens for:
  • Honeypot contracts (tokens you can’t sell)
  • Rug pull indicators
  • Malicious contract code
  • Unusual trading restrictions
GoPlus security scanning is enabled by default. You can toggle it in Settings, but keeping it on is strongly recommended.

Your Security Responsibilities

Never Share Your Private Keys

AceBot support will NEVER ask for your private keys. Anyone asking for keys is a scammer.
Your private keys give full control over your funds. Never share them with anyone, including:
  • “Support” staff in DMs
  • “Admins” claiming to help
  • Websites asking for keys
  • Anyone, ever

Verify Bot Identity

Before interacting with AceBot, confirm you’re using the real bot:
  • Official bot: @AceBotApp
  • Official community: Check the verified community link
Scammers create fake bots with similar names. Always verify before depositing funds.

Start with Small Amounts

When trying new features or trading new tokens:
  1. Start with a small test amount
  2. Verify the transaction works correctly
  3. Scale up once you’re confident

Back Up Your Wallet Access

Your AceBot wallet is tied to your Telegram account. Protect your Telegram account:
  • Enable two-factor authentication (2FA) on Telegram
  • Use a strong, unique password
  • Never share your Telegram login code
Token contract addresses can come from anywhere. Before trading:
  • Verify the contract address from official sources
  • Check if GoPlus flags any security issues
  • Research the token on DEX Screener or similar platforms

Security Settings in AceBot

GoPlus Security Toggle

Enable or disable token security scanning:
  1. Tap ⚙️ Settings
  2. Find 🛡️ GoPlus Security
  3. Toggle on (recommended) or off
When enabled, AceBot will warn you about potentially risky tokens before trading.

Wallet Access Through Secure Portal

If you need to access your private keys (for migration or backup):
  • AceBot provides a secure external portal
  • Never type keys directly in Telegram
  • Access keys only on a secure, private device

Common Scams to Avoid

Scammers pose as AceBot support in your DMs. They may:
  • Ask for private keys “to fix an issue”
  • Send links to fake websites
  • Claim your account is suspended
Reality: Real support never DMs first and never asks for keys.
Fake bots with names like “@AceBot_Official” or “@AceBotSupport”:
  • May look identical to the real bot
  • Ask you to “verify” your wallet
  • Steal any keys you enter
Reality: The only official bot is @AceBotApp.
Tokens designed to trap your funds:
  • You can buy but not sell
  • High tax on sells (90%+)
  • Contract can freeze your tokens
Reality: GoPlus scans for these. Always check security warnings.
Developers abandon projects after:
  • Draining liquidity pools
  • Dumping their token holdings
  • Disabling contract functions
Reality: Research projects before investing. Check liquidity locks and team credibility.

What to Do If Compromised

If you suspect your wallet is compromised:
1

Stop Using the Wallet

Do not make any more transactions from the compromised wallet.
2

Create a New Wallet

Create a new wallet in AceBot immediately.
3

Transfer Remaining Funds

If any funds remain, transfer them to your new wallet as quickly as possible.
4

Report the Incident

If you were scammed, report the scammer’s Telegram account and warn the community.

Security Checklist

  • 2FA enabled on Telegram
  • Using official bot @AceBotApp
  • GoPlus security enabled
  • Never shared private keys
  • Started with small test amounts
  • Verified token contracts before trading

Next Steps