Key Concepts
Embedded custodial wallet: Keys are service-held but never leave the enclave in plaintext.
TEE / Intel® SGX: Hardware-enforced secure enclave; even privileged software cannot read enclave memory.
Wallet sets: A user can have Main and additional sets (e.g.,
Forward-0) across chains.Session cookies: HTTP-only, Secure cookies protect authenticated endpoints.
Attestation: Sensitive results (e.g., cross-chain address) include an enclave
signatureand an SGXattestation.quote.Export / Close gates: Export is a 2-step, nonce-verified flow; closing an account requires a successful prior export.
Last updated