What VEX
ships.

Every mutating Hyperliquid tool is live the moment the trading mode is active. An earlier release gate that hid the perp open tool behind a flag was removed after live testing showed it caused the agent to waste turns searching for a hidden tool.

Stop loss stays mandatory on every position open. Take profit can now be added or replaced independently through setTpsl, so a compensation flow that restores a stop after a rejected entry can no longer lose the take profit target.

The level 2 slippage gate was rewritten to be direction aware. It previously flagged a price improving fill as a slippage violation because it measured the absolute difference instead of the adverse direction, which caused real, false positive trade blocks in production.

Protection state reads now parse venue decimal values leniently instead of rejecting legitimate books, and skip validation entirely for read only tools that cannot move funds.

Per wallet mutation locks, durable pre sign execution intents, and complete approval previews (size, price, duration) were added ahead of the wave 2 security audit.

A persistent candle store lets the agent watch markets, scan for breakouts, volume spikes, moving average crosses, and RSI conditions without paying the token cost of re fetching history every turn.

The Hyperliquid builder fee now routes to the VEX treasury, funding VEX token buyback and burn.

Transaction receipts are now checked for a reverted status everywhere the agent waits on chain. Previously a reverted approval could be treated as a granted allowance, and a reverted swap could be reported as a completed trade. This is now caught with a dedicated CONFIRMATION_UNKNOWN code so the agent never blindly retries an ambiguous outcome.

ERC 20 balances are checked before every approval and swap, replacing a confusing on chain revert with a clear, specific error naming the token and the shortfall.

Fee on transfer tokens can now be sold on Uniswap V2. The previous swap functions assumed no transfer tax and always reverted on exit for these tokens; the fee aware router variants fix that.

Relay, Khalani, and Polymarket integrations now report terminal failures honestly instead of quietly treating a failed or refunded bridge step, or a rejected order, as a success.

The trade side recorded for Uniswap and KyberSwap trades is now derived from the actual economic direction of the swap rather than the tool name that was called.

KyberSwap approvals are exact amount only, quotes and executions are bound to the same slippage value so a stale quote can no longer silently pass a fresh execution, and every response is verified against the expected router address before broadcast.

Wallet send now flows through a proper two step approval handoff. A prepared send synthesizes the confirmation step through the standard tool path, so restricted sessions see the approval card immediately instead of requiring an extra model round trip.

Turns that end incomplete, whether from a timeout, an iteration limit, or exhausted context, now surface an honest, operator facing notice instead of silently looking finished.

Mission mode gained a hard time box. The mission duration is frozen into the run's contract the moment it starts, so nothing can move the deadline after the fact, and the turn loop stops cleanly with a dedicated deadline reached status rather than burning another inference call past the limit. A time boxed mission is now presented as time boxed, not as a failure.

Every mission now writes to a per wallet results ledger: a race free record of what was opened, closed, and valued, visible in a new read only Mission History panel.

The tool output reader gained search, path, and array query modes (where, sort, offset, limit) for large tool responses that overflow into a blob. Previously those responses could only be read as blind byte slices, which had already caused the agent to wrongly conclude a real market did not exist because the listing was cut off mid page.

The Docker based backend now recovers from a stale bind mount automatically with a non destructive recreate, instead of leaving the operator stuck at a dead end with only a support contact link.

Session lease handling (stop, pause, resume, retry) now follows explicit per operation contracts instead of an unobservable enqueue, so a paused or stopped session behaves predictably from the UI.

Mission renewal is now transactionally idempotent, and the UI hides the Renew action once a draft already exists for that slot.

Token symbols shown in the Moves feed and the trading chart are now resolved only from a verified mint address. A token symbol or brand claim that arrives as free text from an activity record is always dropped rather than trusted, closing a path where a malicious or malformed token name could impersonate a known brand.

Explorer links were added across Moves and the tool ledger for over twenty networks, including Hyperliquid, HyperEVM, Robinhood Chain, Avalanche, Linea, Mantle, Sonic, Berachain, Ronin, Unichain, Plasma, Etherlink, Monad, MegaETH, and zkSync, so any transaction or account can be opened directly on its native block explorer.

The welcome screen now supports multiple configured wallets. With more than one wallet, a chip switcher shows a single wallet's holdings grouped by chain, while the combined total remains the default view.

A searchable model picker in the provider setup wizard, replacing a paste only model id field with a live, filterable catalogue from OpenRouter.

Search and mode filters in the session library, so operators can find a past session by title instead of scrolling.

One click address copy on the wallets review card, so recovering a public address no longer requires entering edit mode.

The New Session dialog now defaults to Mission mode when the session list is already filtered to missions.