TrueHold

TrackExchange

Bybit portfolio tracker

Bybit is where a lot of derivatives books live, and derivatives are exactly the positions you should not track by memory. Funding accrues, margin shifts, and the account balance moves for reasons a spot mindset does not predict.

Track my portfolioWhat a key can and cannot do
Bybit logo

Bybit

in TrueHold · API key

Account total30d

$45,100

UTA

Unified account

9 assets

$28,700

+1.9%

PERP

Open positions

3 positions

$11,400

-2.3%

EARN

Earn

1 product

$5,000

+0.1%

Bybit logo

Bybitin TrueHold

TrueHold connects to Bybit directly with a read-only key and keeps the whole account in view: unified trading balances, open positions and history, next to your other exchanges, your perp DEXes and your wallets. The key can read everything and touch nothing.

How it connects

  1. 01

    Create a read-only API key

    In Bybit: API, create new key, choose Read-Only. No withdrawal permission exists on such a key, whatever happens to it.

  2. 02

    Paste key and secret

    Stored encrypted, used for reading balances, positions and history. Nothing else is possible with it.

  3. 03

    Watch it assemble

    Unified account balances and derivatives positions join your total next to wallets and other venues.

What you will see

Derivatives in daylight
Open positions and balances from the unified account, read continuously instead of checked occasionally.
Direct, not generic
Bybit is a first-class integration: account types and history handled the way the exchange actually structures them.
Read-only enforced by Bybit
The permission lives on the key server-side. A read-only key cannot trade or withdraw, full stop.
One book across venues
Bybit positions counted with Hyperliquid, Lighter and your other accounts, one exposure number.

Questions people ask

No. Bybit enforces permissions server-side; a key created as read-only cannot place orders or withdraw regardless of who has it.

Yes. Positions, balances and history from the unified account are read and folded into your portfolio with the rest of your book.

Delete the key in Bybit’s API settings; the connection dies immediately. Creating a fresh key later takes a minute.

Yes. Connecting Bybit and seeing your balances, history and PnL costs nothing. Premium exists for the extras, tax-ready CSV exports above all, and nothing about plain tracking sits behind it.

Continuously. TrueHold re-reads the account on a rolling schedule, so moves on Bybit appear within minutes and valuations follow live prices in between.

Yes, one key per Bybit account. Connect both and they live side by side in the same portfolio, separately labeled, jointly totalled.

Sync stops immediately: Bybit refuses the key from that moment. Your existing history stays visible in TrueHold until you delete the account there too, so revoking never destroys your records by surprise.

Blog

All articles
Self-custody

Aug 31, 2026 · 3 min read

Can a read-only API key be used against you? An honest threat model

A read-only key cannot move funds. The real risks are quieter: privacy, profiling, forgotten keys. The full threat model, including what vendors skip.

Self-custody

Aug 31, 2026 · 3 min read

How read-only API keys work, and why they can’t move your funds

Every exchange key comes with permission scopes. Understand the three tiers and you know why a read-only tracker can see balances but never touch them.

More to track

Everything TrueHold tracks

Bybit is one source among many. The portfolio tracker reads wallets by address and exchange accounts through keys that can only read, then totals them in one view.

Your whole portfolio, one view

Bybit is one piece. TrueHold is the portfolio tracker that puts your wallets, exchanges and perps into one total, with honest PnL.

Start tracking free

TrueHold is an independent tool and is not affiliated with, sponsored or endorsed by Bybit. Names and logos belong to their owners.