Custody decides the risk
A bot can generate and hold an encrypted key for you, ask you to import a key, or have your own wallet sign. If a service holds the key, you rely on its security. Maestro, for example, is listed with imported keys, while BonkBot, Axiom and Padre are listed as non-custodial. Read the docs for the tool you use.
MEV protection
Bots can route transactions privately so they cannot be sandwiched. BonkBot's docs describe protection as on by default and recommend keeping it on, Axiom offers Off and Reduced modes through Jito and says a higher bribe is not fully effective, and Trojan says protection bundles transactions privately. See what MEV protection is.
Checklist
- Use only the official link from the project's own site, because fake bots copy popular names.
- Fund a separate wallet with an amount you can lose.
- Know how to export or move funds out.
- Turn on sell protection or confirmations where offered.
- Never share your recovery phrase with a bot or support.
Compare tools on the Telegram bots page and read what a trading bot is.