Senpi AI review: is it safe? (Nov 2026)

Is Senpi safe? Senpi is built so that your AI agent can trade but cannot move your money. Your wallet is non-custodial, the agent works only inside the strategy and wallets you authorize, and every withdrawal needs you, confirmed with MFA. Those protections cover who can move your funds, not how your trades turn out: trading perpetual futures can still lose money. This page sets out the facts with dates and sources, as of Nov 7, 2026.

Who is behind Senpi

Senpi is made by Senpi AI Inc., a Delaware corporation at 3571 Far West Blvd #3216, Austin, TX 78731, named in its Terms of Service (effective Oct 26, 2026) and Privacy Policy. The founders are Jason Goldberg (CEO), Sarvesh Jain (CTO) and Ignas Peciura (COO). The App Store and Google Play listings are published by Senpi AI. More on the product: What is Senpi?

Who can move your money

What your agent can do without asking

Your agent trades the strategy you confirmed, in the strategy wallets you authorized, and nothing else. Opening a position outside the plan, closing a strategy or moving funds between your Senpi wallets waits for your approval, one action at a time, unless you’ve set a standing approval for it in the Senpi app. It cannot trade from your main wallet, withdraw, or widen its own permissions, and nothing it reads, whether a post, a web page or a message, can give it more. Once you confirm a strategy, its rules run as code on Senpi’s runtime, and by default no AI model makes live trading decisions. Strategies built from a rule or a template exit through DSL, a stop that ratchets up as the trade gains; copy strategies carry at most a flat stop.

Audits and open code

• Wallet infrastructure: Senpi’s wallets run on Privy, which is SOC 2 Type I and Type II certified, has been audited by Cure53, Zellic and Doyensec, and runs a public bug bounty on HackerOne. These audits cover Privy’s wallet and key systems, not Senpi’s own application.
• Open source: Senpi’s agent skills and strategy templates are public on GitHub, and so is the OpenClaw framework the agents run on, so anyone can read what an agent runs.
• Onchain record: every trade settles on Hyperliquid, where each fill is public, and every agent action is logged in your account.

The October 2026 hosting incident

1. Railway discloses a breach

   Oct 21, 2026

   Railway, the provider that hosts Senpi’s agent machines, disclosed that customer environment variables had been exposed.

2. Senpi publishes its write-up

   Oct 22, 2026

   Nothing exposed could move money: owner keys never touch Senpi, the agent holds no wallet key at all, signing happens inside Privy’s enclave rather than on Railway, and withdrawals need MFA in the app. No misuse was found, and users did not need to do anything. Read the write-up.

3. Credentials rotated

   Oct 21–22, 2026

   Agent credentials were rotated across the fleet as a precaution; setting up new agents paused for about a day and a half while strategies kept running.

What reviews say, Nov 7, 2026

Automated checkers read the same public signals differently. Gridinsoft’s website reputation check scores senpi.ai 95 out of 100 with no warnings from external providers, while others mark the domain down for its private WHOIS record and its age. The company behind senpi.ai is named above, with its address.

Risks Senpi does not remove

• Market risk: perpetual futures use leverage and can be liquidated; strategies and copied traders can lose money.
• Execution risk: no stop guarantees a fill at its trigger price, especially in fast or thin markets.
• Protocol risk: trades settle on Hyperliquid and, for stocks and other XYZ markets, on markets deployed by trade[XYZ]; Senpi does not control either.
• Eligibility: you must be 18 or over and your use must be permitted where you live; see Hyperliquid in the US.

Four habits that protect your account

1. 01Turn on MFA. Withdrawals stay locked until it is on; a passkey or an authenticator app is stronger than SMS.
2. 02Use official channels only: senpi.ai and the official Senpi iOS and Android apps.
3. 03Ignore DMs. Senpi support never messages you first, and no one from Senpi will ever ask for your password, seed phrase, private key or MFA codes.
4. 04Keep your secrets. No one from Senpi will ever ask for your password, seed phrase, private key or MFA codes.

Frequently asked questions