Check a download before you open it.

Installer signing

The Windows installer is not code-signed, and the Apple Silicon Mac installer is not Apple-notarized. Windows may show an unknown-publisher warning. macOS may identify Polybot as coming from an unidentified developer. ROM does not ask you to turn off antivirus protection or disable operating-system security.

A checksum match confirms that the file matches the published installer. It does not establish that the software is safe or suitable for your use.

Verify the Windows download

Download the ROM Polybot 2.36.6 Windows installer and its SHA-256 checksum. If the installer is in your Downloads folder, this PowerShell command compares them:

$file = Join-Path ([Environment]::GetFolderPath('UserProfile')) 'Downloads\ROM.PolyBot-Setup-2.36.6.exe'
$expected = (Invoke-RestMethod 'https://romapps.xyz/assets/SHA256SUMS-Polybot-2.36.6.txt').Trim().Split(' ')[0]
$actual = (Get-FileHash -LiteralPath $file -Algorithm SHA256).Hash
if ($actual -eq $expected) { 'MATCH' } else { 'DOES NOT MATCH — do not install this file' }

If you saved the installer elsewhere, change the file path. This installer is for Windows 10/11 (64-bit).

Verify the Apple Silicon Mac download

For macOS 15 or later on an M-series Mac, download the ROM Polybot 2.36.6 disk image. If it is in Downloads, open Terminal and run:

expected=$(curl -fsSL https://romapps.xyz/assets/POLYBOT-MAC-CHECKSUMS-2.36.6.txt | awk '/arm64\.dmg/ {print tolower($1)}')
actual=$(shasum -a 256 ~/Downloads/ROM.PolyBot-2.36.6-arm64.dmg | awk '{print $1}')
[ -n "$expected" ] && [ "$actual" = "$expected" ] && echo MATCH || echo 'DOES NOT MATCH — do not open this file'

If you saved the disk image elsewhere, change the file path. To compare by eye instead, run shasum -a 256 on the file and check the result against the hash beside the same filename in the published Mac checksum file; letter case does not matter. If they differ, do not open the download.

Open the disk image and drag Polybot to Applications. Because this build is not Apple-notarized, macOS may warn before first launch. Read Apple’s current guidance and decide whether to open it. Apple explains the Privacy & Security “Open Anyway” option for an app you have tried to open and deliberately trust. Do not disable macOS security system-wide. Both installers include the Python runtime.

ROM Nova

Open the Nova browser app or find Windows downloads on the ROM Nova releases page. Use the checksum attached to the matching release when verifying a download. Do not compare checksums from different versions.

ROM Recoil

ROM Recoil is a zip, not an installer, and it isn’t code-signed either, so Windows SmartScreen may warn before RomRecoil.exe opens. Download it from the ROM Recoil page, where a PowerShell command compares the zip with its SHA-256 checksum. Macros can break a game’s terms of service; use it at your own risk.

Before connecting a trading account

Polybot needs your Polymarket US Key ID and Secret Key. Create API keys on Polymarket US and keep the Secret Key private. Credentials are encrypted locally with a key protected by the operating system’s credential store. Trading starts paused. Its main-strategy execution checks are not a guarantee of profit, and live authenticated trading remains unverified for this release.

Nova is a research tool and does not execute trades. Review the data labels and limitations before making your own trading decisions.

Get help

For Polybot, Recoil or website issues, open a support issue. For Nova, use the Nova issue tracker. GitHub sign-in is required to post.

Include the app version and a description of the problem. Never post API keys or secret keys in a public issue.