Author
Co-Founder and CTO, VEYRNOX LTD · London, England
Al Socrates Jobson is Co-Founder and CTO of VEYRNOX LTD (UK Companies House17299951), the London-registered company building the VEYRNOX self-custody wallet for iOS and Android. VEYRNOX removes the 12-word seed phrase from the user experience by generating and using the signing key inside the phone's Secure Enclave and splitting the recovery backup as m-of-n Shamir shares.
Al writes on wallet security architecture with a bias toward primary sources: Chainalysis, Elliptic, TRM Labs, Scam Sniffer, PeckShield, Trail of Bits, SlowMist, the FBI IC3, Jameson Lopp's physical-attacks index, and the underlying IETF, Bitcoin, and Ethereum specifications. Every article on this site is signed with a byline and a corrections address; the corrections policy is at /editorial-policy.
Design of wallet features that reduce loss when the attacker has physical access to the user or the device: duress PIN, decoy wallets, silent alerts, and withdrawal limits. Analysis of why passphrases fail under stress in most documented cases.
Mechanics of the wallet-drainer economy: fake dApps, gasless permit signatures, Permit2 abuse, setApprovalForAll on NFTs, and the transaction-simulation defences that actually stop them.
Why the 12-word phrase is now the largest single loss vector in retail self-custody. How SLIP-39 splits a backup across trusted parties without exposing the signing key.
Apple Secure Enclave and Android StrongBox as the signing-key floor. Trade-offs versus MPC and threshold signatures for retail users.
Explorer-history exploitation, vanity-address economics, and the wallet-UI shortcuts that turn a $0 transfer into a $68M loss.
5 articles across wallet security, published September 2026
5 articles submitted September 2026
Corrections to any article are logged in public at/editorial-policy. Email support@veyrnox.comwith the URL and the mistake; response within three working days.
Press queries and interview requests to the same address.
