
Cryptohopper Review
No-withdrawal custody with plan prices and refund terms in full
of 10
Cryptohopper scores 8.4 in trading tools. It never asks for withdrawal rights, publishes every plan price with a 14-day exit, discloses four security controls and names a registered Dutch company. It is spot-only on 11 exchanges and does not say how stored API keys are protected. Desk research checked November 6, 2026.
Overall score
8.4 = (9 + 9 + 7 + 9 + 8) / 5
Operator
Cryptohopper B.V., Netherlands, KvK 70270481, Edam
Plans
Explorer $29, Adventurer $69, Hero $129/mo; $24.16/$57.50/$107.50 annual
Custody
Funds stay on the exchange; never asks for withdrawal rights
Exchanges
11 named as available, spot only
Security
2FA, IP whitelisting, device codes, bug bounty; key storage not stated
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (9.0 + 9.0 + 7.0 + 9.0 + 8.0) ÷ 5 = 8.4.
Pros
- Custody 9: funds stay on the exchange and Cryptohopper says it never asks for withdrawal rights
- Pricing 9: $29, $69 and $129 a month, annual rates, plan limits and VAT treatment published
- Security 9: 2FA, IP whitelisting, a published bug bounty and a disclosed 2022 incident
- Entity 8: Cryptohopper B.V., KvK 70270481, Edam, under Dutch law
Cons
- No statement on how stored API keys are encrypted, and no independent audit
- A June 2022 SQL-injection incident exposed user emails and encrypted passwords (API keys not obtained, per notice)
- Coverage 7: 11 named exchanges, spot only; futures are not offered
- Liability capped at $1,000 or six months of fees, whichever is lower
How Cryptohopper scores in trading tools
Cryptohopper is a cloud-hosted bot that places orders in a centralized exchange account you connect; funds stay on the exchange. This entry rates it in our crypto trading tools ranking. The basis is desk research of Cryptohopper's pricing page, exchanges page, terms of service, help center, security bounty page and its 2022 incident notice, checked on November 6, 2026. No account was opened and no key was connected. The category has five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.
| Criterion | What the sources show | Mark |
|---|---|---|
| Pricing transparency | Three plans priced monthly and annually, with coin, position and interval limits, VAT treatment, Copy Bot price range and a 14-day withdrawal right that the terms and help center both state. | 9 |
| Custody & API safety | The pricing page says funds "will always remain on the exchange" and that Cryptohopper will never ask for withdrawal rights. Connection is by OAuth2 (Fast Connect) or API key. | 9 |
| Venue coverage | The exchanges page names 11 available venues. Spot only: a help article says futures are not offered. | 7 |
| Security posture | 2FA, IP whitelisting, new-device email codes and a published bug bounty. No statement on how API keys are stored, and no audit. A 2022 SQL-injection incident was disclosed. | 9 |
| Entity transparency | The terms name Cryptohopper B.V., Dutch Chamber of Commerce no. 70270481, Hamerstraat 3D, Edam, with Dutch law and Amsterdam courts. | 8 |
The overall score is the plain average: (9 + 9 + 7 + 9 + 8) / 5 = 42 / 5 = 8.4, up from 8.0 at the July 24, 2026 check. Three marks moved. Venue coverage rose from 6 to 7, because Cryptohopper's exchanges page now names each supported venue rather than giving only a count. The earlier review's "16+ exchanges" figure is not supported by any current Cryptohopper page and has been dropped. Two marks were reset under the category's scale rules of November 6, 2026. Security posture rose from 7 to 9, because security is now marked on the number of disclosed controls and Cryptohopper discloses four. Custody & API safety moved from 10 to 9, the mark every tool that holds a trade-only key on its servers now gets.
Strongest criteria
No withdrawal rights, stated plainly (9)
The pricing page's FAQ says funds stay on the exchange and that Cryptohopper "will never ask for withdrawal rights." The fund-safety article repeats the instruction not to enable withdrawals when creating a key. On several exchanges, Fast Connect uses an OAuth2 login instead of a pasted key. That is the arrangement the rubric scores highest for a cloud bot, and the mark is the same 9 that Altrady, Coinrule and 3Commas get for it. It stops below 10 because Cryptohopper holds a trading credential on its servers and does not state that it rejects withdrawal-enabled keys, as Bitsgap does.
Security: four disclosed controls, one gap (9)
Cryptohopper's fund-safety article recommends 2FA on both accounts, keys without withdrawal rights, and whitelisting Cryptohopper's IP addresses so a key works only from its servers. New-device logins are confirmed by an emailed code. A security bounty page sets out scope, severity priorities and a reporting address, though no payout amounts. Cryptohopper also published a notice in June 2022 that SQL injection against its website API exposed names, usernames, email addresses and encrypted passwords; it said API keys were not obtained and asked users to rotate passwords and keys. Of the six controls the category's security scale counts, four are disclosed: IP whitelisting, 2FA, a published bug bounty and a disclosed, handled incident. Four controls score 9, the highest security mark in the ranking. The gap is key storage: we found no Cryptohopper statement on how stored API keys are encrypted, and no independent audit or penetration test, so the mark stops short of 10.
Pricing in full (9)
Explorer, Adventurer and Hero cost $29, $69 and $129 a month, or $24.16, $57.50 and $107.50 a month on annual billing. The page gives each plan's limits on coins, open positions per exchange and strategy interval, and says prices exclude VAT. Copy Bots are priced separately at $9.99 to $99.99 a month. The terms give a 14-day right to withdraw from a subscription, and the help center describes the same window for refunds, so the cost and the exit are both clear before paying. The mark stops short of 10 because Copy Bot prices are set by sellers and App Store prices differ slightly from the website.
A named Dutch company (8)
The terms give the legal name, Chamber of Commerce number, registered office and governing law. That is the same name, number and jurisdiction standard that gives Coinrule, 3Commas and Bitsgap an 8.
Weakest criterion
Coverage: named, but spot-only (7)
The exchanges page lists Binance, Binance.US, BingX, BitMart, Bitvavo, Coinbase Advanced, Crypto.com, HTX, Kraken, KuCoin and OKX as available. The page's own structured data says 10, a small inconsistency. Futures are not supported, and there is no stock broker or on-chain trading. That is narrower than Coinrule's 13 exchanges plus brokers (8) or Bitsgap's named list (9).
What the score does not cover
The score measures published disclosure. It does not measure bot returns, Marketplace strategy quality, fills or uptime, and none of these were tested. Cryptohopper's help center says it "never guarantees profits." Exchange trading fees are paid on every order on top of the subscription; our guide to maker, taker and spread costs explains them. The terms cap Cryptohopper's liability at $1,000 or the fees paid in the previous six months, whichever is lower, and do not list restricted countries: access depends on the connected exchange.
Cryptohopper vs Coinrule and 3Commas
Coinrule scores 8.0, 0.4 points behind. It matches Cryptohopper on custody (9) and entity (8), trails on pricing (7 against 9) and security (8 against 9), and leads on coverage (8 against 7). 3Commas also scores 8.4 and is listed ahead of Cryptohopper because ties are alphabetical. It has the same pricing (9), custody (9) and entity (8) marks, lower security (8 against 9) and higher coverage (8 against 7). Cryptohopper's 8.4, fourth of ten, rests on pricing, custody and security; a wider venue list is the clearest route to a higher score.
Who it suits
On these marks, Cryptohopper suits spot traders on one of its 11 listed exchanges who want a subscription bot with a fixed price, a 14-day exit and keys that cannot withdraw. It suits less well anyone who needs futures, a wider venue list, or a documented account of how stored API keys are protected.
How it compares

Bitsgap
Refusing API keys that can withdraw, across 16 named exchanges

3Commas
Published pricing and non-custodial, trade-only API keys

Altrady
API-only bots across 19 named exchanges from a named Dutch firm

Coinrule
Trade-only API keys written into its terms, with a named UK operator

TradingView
Charting with full plan pricing and refund rules, no custody

Gunbot
Self-hosted bot that keeps exchange keys on your own machine

BonkBot
Documented key security and a named Swiss operator on Solana

Trojan
Solana trading in Telegram with a stated 1% fee and named operator

Banana Gun
A published percentage fee across eight chains
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Cryptohopper pricing page (plans, FAQ on funds and withdrawal rights) — checked
- 2.Cryptohopper supported exchanges — checked
- 3.Cryptohopper terms of service (last updated 30 July 2025) — checked
- 4.Cryptohopper help: how to ensure the safety of my funds — checked
- 5.Cryptohopper security bounty program — checked
- 6.Cryptohopper data breach notice (June 2022) — checked
Frequently asked questions
Why does Cryptohopper score 8.4?
It is the average of five equally weighted marks: pricing 9, custody 9, coverage 7, security 9 and entity 8. The custody and pricing marks rest on the pricing page and terms; the security mark on its account controls, bug bounty and 2022 incident notice.
What holds Cryptohopper's score back?
Coverage. It lists 11 exchanges, spot only, with no futures. Cryptohopper also does not say how stored API keys are encrypted and publishes no audit, which keeps security below 10.
Why did the score change from 8.0?
Venue coverage rose from 6 to 7 because the exchanges page now names every supported venue. Under the category's scale rules of November 2026, security rose from 7 to 9 for its four disclosed controls and custody moved from 10 to 9, the mark every server-held trade-only key gets.
What was measured, and what was not?
We measured what Cryptohopper publishes on pricing, key permissions, exchanges, security and its operator. We did not open an account or run a bot, so returns, strategy quality and uptime are not scored.
How does Cryptohopper compare with Coinrule?
Coinrule scores 8.0, 0.4 below. Both score 9 on custody and 8 on entity. Cryptohopper leads on pricing (9 against 7) and security (9 against 8), while Coinrule leads on coverage (8 against 7) and names its key encryption.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.