Anyone shopping for an HTX trading bot brings up two things before wiring an account into anything, and neither is about the interface. "I don't want to give my API keys to a third party" comes first, usually right after someone mentions HTX's September 2023 rebrand from Huobi and the two hot wallet breaches that followed within two months of the new name going live. The second complaint lands right behind it: "I'm paying TradingView plus a signal service plus a bot, this is insane," three subscriptions stitched together to automate one exchange account. Both problems trace back to the same design choice. A SaaS bot puts your HTX key on a server you don't control, then bills you monthly for the arrangement.
HTX became HTX after Justin Sun's group took a larger ownership stake in the exchange, and the timing that followed was rough. An attacker drained roughly $8 million from an HTX hot wallet on September 24, 2023, days after the rebrand. A second hot wallet breach hit on November 22, initially reported near $13.6 million and later put at closer to $30 million before HTX made affected users whole through its investor protection fund. That history is worth knowing when you're evaluating HTX as a custodian of your assets on the exchange itself. It has no bearing on whether your API key is safe once you hand it to a third-party bot, which is a separate question with a separate answer.
TradeArmor is built for the API-key half of that problem: a self-hosted crypto trading platform with built-in BTC/USDC signals carrying a multi-year live track record, 15 real-time technical indicators, a plain-English AI strategy builder, DCA, grid, futures, copy trading, backtesting, paper trading, and tax reporting, all running on your own hardware where your keys never leave the machine. One fact before you connect anything: HTX is not one of the eight exchanges wired into the setup wizard by default (Binance US, Binance Global, Coinbase, Bybit, OKX, Bitget, KuCoin, and Hyperliquid). TradeArmor connects HTX and other CCXT-supported venues on request. CCXT is the open-source library that gives a self-hosted bot a common language for dozens of exchange APIs, and HTX is well-supported inside it, so the connection is routine. Confirm it before you subscribe, not after.
What HTX's own bots do, and where they stop
HTX's native automation is grid-shaped. The Grid Trading Bot sets a price range, splits it into steps, and buys low and sells high inside that band without you watching a chart. The Infinity Grid variant drops the upper bound entirely, built for a long uptrend where you don't want a ceiling capping the strategy. Both are genuinely useful for range-bound or steadily climbing markets, and both ship free inside the exchange with no coding required.
Neither one evaluates a rule outside its own price band. There's no field on HTX for "buy when RSI drops below 35 and Supertrend just turned bullish," no way to feed in a signal from an outside source, and no dollar-cost-average mode with per-level cooldowns or an equity-price gate. Grid bots are a specific tool built for a specific market shape. Once the market stops chopping sideways or climbing steadily, the tool runs out of things to say.
Want to see the strategy engine and signals a self-hosted setup actually runs? See all features.
HTX's hack history, and why it's a different risk than your bot key
The rebrand-then-breach sequence is the first thing most people bring up about HTX, so it's worth being precise about what happened. Huobi became HTX on September 13, 2023, days after Justin Sun's team took a larger ownership stake. On September 24, an attacker drained roughly $8 million from an HTX hot wallet. On November 22, a second hot wallet breach hit for an initially reported $13.6 million that grew to around $30 million before HTX made affected users whole through its investor protection fund and resumed normal service.
Two hacks in two months is a real mark against an exchange's hot wallet security, and it deserves exactly that reading: an exchange-side custody event. Two hacks in two months would end most companies. In crypto, it barely dents the news cycle.
It says nothing about the bot you connect to your HTX account. A third-party SaaS bot's own server can be breached the way 3Commas was in 2022, completely independent of anything HTX does with its own wallets. Whether HTX secured its hot wallet in 2023 and whether your bot vendor secures your API key today are unrelated questions with unrelated answers. Self-hosting only fixes the second one, because there's no TradeArmor server holding your key in the first place for anyone to breach.
What HTX traders actually want from an external bot
Past the grid bot's ceiling, the requests look the same as they do on every other exchange.
They want entry logic they actually defined. A rule like buy when RSI is oversold and Supertrend just turned bullish, written once and evaluated automatically against every candidate trade. TradeArmor's plain-English AI strategy builder takes that description and turns it into the boolean formula the bot runs, or you can write the formula directly with zero Python.
They want DCA with an actual floor, not a grid pretending to be one. HTX's grid bot rebuys inside a fixed band regardless of trend, with no concept of an unsold cost basis to protect. TradeArmor's DCA engine runs unlimited levels with per-level cooldowns and an EQ-price gate that holds the next buy until price clears the lowest unsold leg. That gate is the entire difference between averaging down on purpose and just buying every dip on autopilot.
They want the leverage HTX offers handled with real stops, not a manual watch-and-close routine. HTX runs perpetual futures with leverage that climbs well past what most spot traders have ever touched, high enough that liquidation is closer to a certainty than a risk on a bad day. Leverage amplifies losses exactly as fast as gains, no leverage level is ever a recommendation, and stop-loss and trailing take-profit belong on the bot, not on a browser tab you might not be watching when it matters. The mechanics live in the futures trading guide.
How a self-hosted HTX trading bot runs
The mechanics stay deliberately unremarkable. Generate an API key on HTX scoped to read and trade only, paste it into the setup wizard at localhost:8080/setup, pick a strategy mode, and the bot works HTX's order book against your rules around the clock. The key lives in local config on hardware you own. There's no TradeArmor account holding it and no TradeArmor server anywhere in the path between you and the exchange.
Once connected, HTX gets the same feature set as any other exchange in the wizard: gated DCA, partial sells that trim a position without losing the cost-basis anchor, take-profit and trailing take-profit, and exits triggered by indicators or by signal. The built-in BTC/USDC signals, live for over three years, run identically on HTX and can be filtered through your own indicators or skipped in favor of a fully custom strategy. Past performance is not indicative of future results, and every signal is an algorithmic output, never a personalized recommendation.
Trading Groups lets one bot run gated DCA on HTX, a custom RSI formula on Bybit, and grid-style range trading somewhere else entirely, all from a single dashboard with independent settings per group. HTX's own grid bot will never do that. It doesn't know any exchange exists besides the one it's running inside.
Locking down your HTX API key
This is where the actual protection lives, not in whichever headline the exchange made in 2023.
HTX API keys ship with read, trade, and withdrawal permissions, and withdrawal is off by default. Leave it that way. Grant your bot read and trade only, never withdrawal, and a leaked key can place an unwanted order but cannot move a single coin off the exchange. The general mechanics of this pattern across every exchange live in the API key security guide, and the direct answer to whether a bot can withdraw your funds is: not without a permission you control and never have to grant.
Bind the key to an IP address too. HTX auto-deactivates any key carrying trade or withdrawal permissions that isn't bound to an IP address after 90 days of inactivity, and pinning the key to your bot's address closes that gap before it opens, plus it stops the key from working anywhere else the moment it leaks. The per-exchange rundown of this trap across every supported venue lives in the exchange API permissions guide.
Setting it up, start to finish
The full path, in order:
- Confirm HTX is connected for your account. It runs through CCXT on request, not the default eight, so verify before you subscribe.
- Create the API key on HTX. Enable Read and Trade. Leave Withdraw off.
- Bind the key to an IP address. This clears HTX's 90-day inactivity deactivation for unbound keys and blocks the key from working anywhere else if it leaks. Store the secret, which HTX shows once.
- Install TradeArmor. Download the ZIP, run
pip install -r requirements.txt, thenpython main.py. About 512 MB of RAM and 100 MB of disk is enough for a Raspberry Pi in a drawer or a machine that's already running around the clock. - Run the setup wizard. Open
localhost:8080/setup, select HTX, and paste the key and secret. Choose a strategy mode: built-in signals, hybrid with your own indicator filters, or fully custom. - Paper trade first. Run the strategy against live HTX data on a simulated balance before a single real order fires. Flip one setting to go live once it behaves the way you expect.
Most traders who land here started on HTX's grid bot, hit its ceiling once the market left the range they'd drawn, and went looking for something that reads more than price bands. That's the exact gap TradeArmor fills without asking you to leave the exchange or hand your key to a second company.
TradeArmor turns an HTX account into a fully automated trading operation you actually own: built-in signals with a multi-year track record, 15 indicators, a plain-English AI strategy builder, gated DCA, grid, futures with real stops, peer-to-peer copy trading, backtesting, paper trading, and one-click tax exports, all running on hardware where your keys never leave the machine. If that's the version of an HTX trading bot you want, see the pricing and get started.