01 — THE PROBLEM Why 52 Points Wasn't Enough
V2.0 of the NIKA Account Defense System shipped with 52 protection points across 14 security modules. It stopped unauthorized trades, blocked rogue EAs, enforced position limits, and locked down MT5 accounts against the most common attack vectors.
For most traders, it was more than enough. But "most" isn't the standard we build to.
Within weeks of V2.0's deployment, a pattern emerged. Traders weren't getting blown up by obvious threats — they were getting bled by invisible ones. A slow equity drain from correlated positions that all moved against them at once. A spread spike during Asian session that triggered stop-losses at prices that shouldn't have existed. A weekend gap that turned a perfectly hedged position into a margin call.
The threats that survived V2.0 were the ones that look like normal market behavior — until they destroy your account. V2.2 was built to catch every single one of them.
02 — THE RESEARCH What Institutional Desks Know That Retail Traders Don't
Before writing a single line of V2.2 code, we spent weeks studying three worlds that retail MT5 traders almost never look at:
Institutional OMS/EMS platforms. Order management systems at hedge funds and prop desks don't just fill orders — they enforce correlation limits, aggregate exposure across instruments, and flag execution anomalies in real time. Every feature in V2.2 has a direct institutional counterpart. We just rebuilt them for a single-account MT5 environment.
Prop firm failure data. We analyzed the most common reasons traders fail FTMO, The Funded Trader, MyForexFunds, and E8 Funding challenges. The pattern was overwhelming: it's rarely one catastrophic trade. It's an accumulation of small mistakes — consecutive losses without a break, unrealized drawdown creeping past limits, weekend gaps on positions that should have been closed Friday afternoon. V2.2 was specifically engineered to prevent these failure modes.
The MT5 add-on market. We audited every commercial MT5 protection tool available. Most cover 3-5 risk parameters. The best ones reach maybe 15-20. None of them address broker execution quality, none aggregate correlated exposure, and none provide exportable evidence for dispute resolution. V2.2 doesn't compete with these tools. It makes them irrelevant.
03 — THE MODULES 10 New Defense Points, Explained
Each module below was built to eliminate a specific nightmare scenario. These aren't theoretical risks — they're real situations that have cost real traders real money.
CorrelationGuard
Currency Exposure AggregatorYou're running three EAs. One buys EURUSD, another buys EURGBP, a third buys EURJPY. You think you're diversified across three pairs. In reality, you have 3x long EUR exposure. ECB surprises with a rate cut — all three positions move against you simultaneously. Your "diversified" portfolio was a concentrated bet you didn't know you made.
CorrelationGuard decomposes every open position into its individual currency components and aggregates net exposure per currency across all pairs. If your total long EUR exposure exceeds the configurable threshold — expressed in lots — it blocks any new trade that would increase that exposure. It doesn't care which EA opened the position. It sees through the pair labels to the actual currency risk underneath.
Prop firm challenges have daily drawdown limits of 4-5%. A concentrated currency exposure can hit that limit in a single news event. CorrelationGuard enforces the same single-currency risk limits that institutional desks have used for decades — now running inside your MT5.
SpreadGuard
Spread Spike ProtectionIt's 4:59 PM EST. Liquidity is draining. Your EA fires a market order on GBPJPY and the spread silently balloons from 2.1 to 18.7 pips. You just entered a trade that's -16 pips underwater before the candle even closes. Your EA saw a valid signal. It didn't see the spread.
SpreadGuard maintains a circular buffer of recent spread readings for every symbol being traded. It computes a rolling average and sets a dynamic ceiling — configurable as a multiplier of the average. When the current spread exceeds the ceiling, all new trade requests on that symbol are blocked until the spread normalizes. The circular buffer design means zero memory allocation during operation — critical for high-frequency tick environments.
Spread spikes are invisible account killers. They don't show up in your trade journal as "bad entries" — they show up as trades that were doomed from the open. SpreadGuard is the gatekeeper that ensures every trade starts at a fair price, protecting both your P&L and your challenge metrics.
WeekendShield
Friday Auto-Close & Gap ProtectionFriday evening. You leave three positions open — your EA has trailing stops, should be fine. Over the weekend, geopolitical tensions escalate. Sunday open: USDJPY gaps 180 pips. Your stop-loss is at -40 pips. It fills at -180. One weekend gap just cost you 6% of your account — and your prop firm challenge.
WeekendShield monitors the server day and hour. When Friday hits the configurable close window (default: 20:00 server time, adjustable), it automatically flattens all open positions or reduces them to a configurable maximum exposure. It sends a push notification before closing, giving you time to override if needed. No manual intervention required — it runs every Friday, whether you remember or not.
Weekend gaps are the #1 single-event account killer for prop firm traders. Many firms explicitly warn against holding over weekends. WeekendShield automates a discipline that most traders know they should follow but don't. It turns "I forgot to close my trades" from an account-ending mistake into an impossibility.
SessionGuard V2
Per-Day Session EnforcementYour strategy is profitable during London session but bleeds money during Asian. You set a session filter, but it only checks trade entry time — it doesn't close trades that extend past the window. Your London entry drifts into Asian session, Tokyo volatility triggers your stop, and you book a loss that shouldn't exist.
SessionGuard V2 goes beyond simple session filtering. It allows you to define different trading windows for each day of the week — Monday through Friday, independently configured. When a session window closes, it doesn't just block new trades: it auto-flattens any positions still open. This is true session enforcement, not session suggestion. Every day, every session, every position.
Session discipline is the difference between consistent profitability and random noise. SessionGuard V2 enforces the exact trading schedule that your strategy was designed for — down to the day of week — eliminating off-hours trades that corrupt your edge.
LossStreakGuard
Consecutive Loss LockoutYour EA hits a losing streak. Five losses in a row. Statistically, it happens. But your EA doesn't know it's broken — it keeps firing. Loss six. Loss seven. By loss eight, you've burned through 8% of the account. You check the journal hours later and find the damage already done. The EA did exactly what it was programmed to do. It just shouldn't have been trading.
LossStreakGuard counts consecutive closed losses in real time. When the count reaches the configurable threshold (default: 5), it locks out all new trade requests and starts a cooling-off timer. During the cooldown period (configurable, default: 4 hours), no new positions can be opened. The counter resets after a winning trade or after the cooldown expires. It's an automatic circuit breaker for losing streaks.
Prop firm traders live and die by drawdown limits. A 5-loss streak at 1% risk per trade is a 5% drawdown — that's often the entire daily limit. LossStreakGuard enforces the discipline that even experienced traders struggle with: stepping away when the system stops working.
EquityDriftDetector
Gradual Equity Bleed DetectionNo single trade blows your account. Instead, your equity drops 0.3% per day. After 24 days, you're down 7.2%. Each individual trade looks fine. Your daily drawdown checks pass. Your weekly review shows nothing alarming. But zoom out to a 72-hour window and the downtrend is unmistakable. Your EA has a leak, and traditional drawdown limits can't see it.
EquityDriftDetector records equity snapshots at regular intervals and computes the trend over a rolling 72-hour window. It measures the slope — not just the absolute change. If the equity curve shows a persistent negative drift exceeding the configurable threshold, it raises an alert and optionally locks trading. It catches the slow bleeds that absolute drawdown limits miss because no single data point looks dangerous.
Most prop firm accounts don't die in a crash — they die in a slow bleed. The daily drawdown check passes every day, but the overall account drifts steadily toward the maximum drawdown limit. EquityDriftDetector is the early warning system that catches strategy degradation before it becomes account failure.
FloatingDrawdownGuard
Unrealized P&L Cap — CRITICALYour realized P&L is fine. But you're holding three open positions with a combined unrealized loss of -$2,400 on a $50,000 account. That's -4.8% floating drawdown. Your prop firm's daily drawdown limit is 5%. One more adverse tick and you breach — even though you haven't closed a single losing trade. Most protection tools only track closed-trade P&L. Your prop firm tracks equity, live, every second.
FloatingDrawdownGuard continuously monitors the gap between your account balance and current equity — the unrealized P&L of all open positions combined. When this floating drawdown reaches a configurable percentage of the account (default: 4%), it immediately closes all open positions to lock in the current equity level. No warnings, no delays. The moment floating drawdown hits the threshold, every position flattens within milliseconds. This is your last line of defense before the prop firm's own system liquidates you at a worse level.
This is arguably the single most important module in V2.2. Prop firms like FTMO and E8 use trailing drawdown based on equity, not balance. Their systems check your equity in real time. If you breach, you're done — no appeal, no second chance. FloatingDrawdownGuard acts before the firm's system does, closing positions at your chosen threshold instead of at the firm's hard limit. It turns a challenge-ending breach into a controlled, survivable stop.
BrokerHealthScore
Execution Quality 0-100Your strategy is profitable in backtesting. Live, it bleeds. You blame market conditions. But the real culprit is your broker: average slippage of 1.8 pips on market orders, 340ms average execution time, and requotes on 12% of trades. Your edge is real — your broker is eating it. You don't know because you're not measuring.
BrokerHealthScore monitors every trade execution and computes a composite quality score from 0 to 100. It tracks slippage distribution, execution latency, requote frequency, spread consistency, and order fill rates. The score updates in real time. If it drops below the configurable threshold (default: 60), it blocks all new trades — because trading on a degraded connection is worse than not trading at all. All metrics are logged for later analysis.
Execution quality is the invisible variable that separates profitable strategies from unprofitable ones. BrokerHealthScore gives you the same execution analytics that institutional desks get from their prime brokers. If your broker's execution degrades — whether from infrastructure issues, liquidity withdrawal, or deliberate manipulation — you'll know immediately, and your capital will be protected.
AccountExporter
Daily CSV Evidence ExportYour broker executes a trade you didn't place. You file a dispute. The broker asks for evidence — timestamps, position details, account state at the time of the incident. You don't have it. MT5's built-in logs are overwritten. Your terminal history is gone. You have no proof. Dispute denied. Your word against theirs.
AccountExporter runs on a daily timer and writes a complete snapshot of your account state to a CSV file: every open position, every pending order, account balance, equity, margin, free margin, all timestamps. Files are saved locally with date-stamped filenames. Each file is a self-contained, timestamped record of your account at that moment. Over time, you build a complete audit trail that no one — broker, prop firm, or regulator — can dispute.
Prop firm disputes are won with evidence. When you believe a breach was caused by broker execution issues, a weekend gap, or a platform glitch, AccountExporter gives you timestamped proof. It's the difference between "I think something went wrong" and "Here's the CSV showing my exact account state 30 seconds before the incident."
PanicButton
Ctrl+Shift+X Instant FlattenBreaking news hits. Your positions are wrong-sided. You need to close everything now. You open MT5, navigate to the trade tab, right-click, close, confirm, right-click the next one, close, confirm. 8 positions. 30 seconds. The market moves another 40 pips against you while you're clicking through confirmation dialogs. Those 30 seconds just cost you $800.
PanicButton registers a global hotkey — Ctrl+Shift+X — that triggers an instant, complete position flatten. Every open position and pending order is closed simultaneously, not sequentially. One keypress. All positions closed. Sub-second execution. No confirmation dialogs, no mouse navigation, no right-click menus. It works from any application — you don't even need MT5 in the foreground.
When the market turns violent, seconds determine whether you survive or breach. PanicButton is the ejection seat. It converts a 30-second scramble into a single keypress. For VPS users, it means instant emergency exit without navigating RDP lag. For multi-monitor setups, it means closing everything without switching windows. It's the last resort you hope you never need — and the first thing you'll reach for when you do.
04 — ARCHITECTURE How 24 Modules Become One System
Ten new modules means nothing if they conflict with each other or with the existing 14. V2.2's integration architecture was designed with a simple principle: every module is independent, but orchestrated.
The Master EA — NikaDefense_Master.mq5 — is the single orchestration point. At 1,922 lines, it coordinates 25 include files containing a combined 12,749 lines of source code. But it's not a monolith. Each module is a self-contained include file with its own initialization, tick processing, and cleanup. The Master EA's job is sequencing, not logic.
OnTick() → SpreadGuard → CorrelationGuard → FloatingDrawdownGuard → BrokerHealthScore → [trade validation pipeline]
OnTimer() → EquityDriftDetector → WeekendShield → SessionGuard V2 → AccountExporter → [scheduled checks]
OnTradeTransaction() → LossStreakGuard → [post-trade analysis]
OnChartEvent() → PanicButton → [hotkey listener]
The zero-conflict design means each module can be enabled or disabled independently. Running a strategy that doesn't need CorrelationGuard? Disable it. Don't trade weekends? WeekendShield still runs but quietly passes through. Every module respects the others' decisions — if SpreadGuard blocks a trade, LossStreakGuard doesn't count a non-existent loss.
No code changes required in your existing EAs. The NIKA Defense System runs as a separate EA on the same account. It monitors and intercepts at the platform level. Your trading EAs don't need to know it exists.
05 — THE NUMBERS V2.2 By the Data
Every attack vector is documented in THREAT_MODEL.md — a complete threat catalog that maps each of the 26 documented attack vectors to the specific module (or modules) that neutralize it. Sub-1-second detection means that from the moment a threat condition is detected to the moment protective action is taken, less than one second elapses for the vast majority of scenarios.
And here's the number that matters most: zero code changes required. The NIKA Defense System works with any MT5 EA. Attach it to your chart, configure your thresholds, and your account is defended. Your trading logic stays untouched.
06 — WHO NEEDS V2.2 Is This Built for You?
Prop Firm Traders
Trading FTMO, The Funded Trader, MyForexFunds, or E8 Funding? V2.2's FloatingDrawdownGuard was built specifically for equity-based trailing drawdown rules. WeekendShield, LossStreakGuard, and SessionGuard V2 automate the exact disciplines that separate traders who pass challenges from those who don't. Stop losing accounts to preventable mistakes.
Multi-EA Portfolio Runners
Running 3+ EAs on the same account? CorrelationGuard is non-negotiable. Without it, you have no way to know if your EAs are accidentally building concentrated exposure in a single currency. V2.2 provides the portfolio-level risk aggregation that MT5 itself completely lacks.
VPS-Hosted Accounts
Your EA runs on a VPS 24/5 while you sleep. What if the broker's execution degrades at 3 AM? What if a spread spike hits during low-liquidity hours? BrokerHealthScore and SpreadGuard run continuous quality checks so you don't wake up to a damaged account. AccountExporter logs everything in case you need proof later.
Traders Who've Been Burned
If you've ever experienced an unauthorized trade, a rogue EA, a weekend gap disaster, or a broker execution issue that cost you money — V2.2 was built from the combined lessons of every one of those failures. The 26 attack vectors in our threat model aren't theoretical. They came from real trader losses.
Ready to Upgrade Your Defense?
62 protection points. 24 security modules. Sub-1-second threat detection. One purchase, lifetime access.
One-time payment · Lifetime license · All future V2.x updates included
Get NIKA Defense V2.2Includes complete source code, documentation, THREAT_MODEL.md, and setup guide.