What the browser key can sign, and the prompt that means you should stop

Two addresses do this job, and the page is not the thing that keeps them apart. The contract does. The creator is the wallet you connect. It is the owner of the vault. Only that wallet can withdraw, move tokens out, or pause. The trading key is created in this browser. It is the vault’s agent. It can swap back into the vault, unwrap WMON the vault already holds, and deposit. It cannot call withdraw. If a screen says the key will send the vault to an address you type, the screen is wrong or the site is not this one.

What you can see, and what you must not be able to see

The key’s address is on the Velocity screen, under Trading key, with the MON it holds. You can copy it. You can send MON to it if you want to top up gas by hand. You cannot read the private key off the page, and you should never be asked to paste one in. A control that offers to export the key, or to “verify” it by typing the seed of your creator wallet into the page, is not part of this desk. Close the tab.

The address is not a secret. The key is. Anyone can look at the balance. Only the key can sign as the agent, and only the creator can sign as the owner. Sending MON to the published agent address funds gas. It does not give the sender the vault.

Owner withdraws. Agent trades. If a prompt mixes those verbs, do not sign.

The float, and the button next to it

The desk keeps 0.25 MON on the key as petrol. That is not a fee. MON above it is profit, and Withdraw profit sends only that surplus. The recipient is the owner recorded on the vault, read at the time of the send, not an address from the form. If your connected wallet is not that owner, the send does not happen. If the surplus is a few ten-thousandths, the button stays away rather than offering you a dust transaction. When the button is there, the figure beside it is the surplus, and after a successful send the key balance should fall by about that figure, down toward the float. It will not fall to zero. Zero would strand the next trade.

The key balance moves when it pays gas or when it is topped up. It does not tick like a staking receipt. A balance that sits at 0.8351 MON while you are not trading is a balance that is telling the truth. A balance that never updates after a trade you can see on the explorer is a stale read, and a refresh is the fix, not a second withdrawal.

What a replaced website can still do

The contract refuses a withdrawal by the agent. It cannot refuse a withdrawal the creator signs. A hostile page that looks like this one can still ask your wallet to sign, and if you sign, that signature is yours. The defence is the prompt. Read the destination. Read the method. A creator signature that moves the vault should be one you started, from a URL you typed or a bookmark you trust, toward your own address. A signature you did not start, especially one that names a spender you have never approved, gets rejected. Then you leave. The key in the browser cannot finish the theft the creator refused.

If the key in this browser is gone

Clearing site data, or opening a different browser, drops the key. The vault does not drop its agent. The old agent address is still the one on the contract. This new browser cannot sign as it, and it must not be told a different key is that agent. Your creator wallet can still withdraw, because the owner path does not need the agent. Do that if you want the funds out. Do not “replace” the agent because a page offered a new address in a hurry. Re-binding is a creator action you do on purpose, and you read the new agent address back from the contract afterwards.

A short no

No to a prompt that withdraws to anywhere but you. No to a prompt that asks for a seed. No to a profit button that names a different token. No to an approval of the trading key as a spender of your wallet’s WBTC. The key does not need your tokens. It needs gas, and it needs to be the agent the vault already names. Everything else is someone improvising, and improvisation does not get a signature.