Key Concepts

  • Embedded custodial wallet: Keys are service-held but never leave the enclave in plaintext.

  • TEE / Intel® SGX: Hardware-enforced secure enclave; even privileged software cannot read enclave memory.

  • Wallet sets: A user can have Main and additional sets (e.g., Forward-0) across chains.

  • Session cookies: HTTP-only, Secure cookies protect authenticated endpoints.

  • Attestation: Sensitive results (e.g., cross-chain address) include an enclave signature and an SGX attestation.quote.

  • Export / Close gates: Export is a 2-step, nonce-verified flow; closing an account requires a successful prior export.

Last updated