VEYRNOX · Security

Security at Veyrnox

Security is not a feature we bolted on — it is the reason VEYRNOX exists. This page documents our security model, cryptography, audit status, bug bounty, disclosure policy, and threat model. If anything here is unclear, email security@veyrnox.com.

Security model

• No seed phrase required for default setup. There is no 12- or 24-word phrase to write down, screenshot, or phish during onboarding. Default setup is an 8-digit PIN, while optional seed import remains available for compatibility.
• Shamir Secret Sharing (Safety Plus). On Safety Plus ($5.99/mo), the seed is split into shards distributed across your device and your personal cloud (iCloud / Google Drive). No single shard is stored by Veyrnox. Free-plan users still get hardware-bound signing and the 8-digit PIN model, without cross-device Shamir recovery.
• Hardware-bound signing. Key operations execute inside the Secure Enclave (iOS) or StrongBox / TEE (Android). Keys never leave the hardware boundary in cleartext.
• Biometric gating. Sensitive operations require Face ID / Touch ID / Android biometric authentication.
• RASP. Runtime application self-protection detects rooted / jailbroken devices, active debuggers, and instrumentation frameworks, and refuses to sign.
• Panic wipe. A user-triggered action zeroizes local shards and vault state on demand.
• Coercion Resistance (Safety Plus). A decoy wallet with plausible balances and transaction history unlocks under a duress PIN while the real wallet stays hidden.
• Encrypted vault. Local state is encrypted with AES-256-GCM under keys derived through Argon2id.
• Opt-in audit log. Users can enable a local, encrypted log of security-relevant events for their own review.

Cryptography summary

• Shamir Secret Sharing (Safety Plus) for seed distribution across device and personal cloud.
• KEK-encrypted shards — every shard is wrapped by a key-encryption key before it is written to any medium.
• Hardware-bound key operations via Secure Enclave / StrongBox.
• Key zeroization — signing material is wiped from memory immediately after use.
• AES-256-GCM for authenticated encryption of the local vault; Argon2id for key derivation from user secrets.

Third-party audit status

Audit in progress — coming ahead of Android launch. Contact security@veyrnox.com for status. We will publish the auditor, scope, and full report here when it is complete.

Bug bounty

Bug bounty program launching alongside Android release. Report security issues to security@veyrnox.com in the meantime — we acknowledge within 48 hours and credit responsible disclosure.

Scope

In scope: the Veyrnox iOS and Android wallet applications, on-device key management and Shamir-sharded backup flows, WalletConnect and dApp signature-request handling, transaction simulation, and the veyrnox.com marketing site.

Out of scope: third-party dApps, DEXs, bridges, and smart contracts you do not operate; blockchain networks themselves; social engineering or phishing of Veyrnox staff; and any issue requiring access to another user's device or data.

Rewards, eligibility, and severity tiers will be published with the formal program. Until then, all valid reports are credited.

Responsible disclosure policy

• Send reports to security@veyrnox.com, encrypted with our GPG key (fingerprint published on request).
• We commit to a 90-day coordinated disclosure window from acknowledgement.
• We credit reporters in release notes and on this page unless anonymity is requested.
• Do not test against other people's wallets, do not exfiltrate user data, and do not run destructive tests against production infrastructure.

Threat model summary

In scope:

• Device compromise (malware, jailbreak, physical access to unlocked device).
• Cloud compromise (attacker gains access to iCloud / Google Drive shard).
• Physical coercion (wrench attack) — addressed by Coercion Resistance on Safety Plus.
• Phishing (reduced as an attack surface by not requiring a seed phrase during default setup).
• Man-in-the-middle attacks on network traffic.

Out of scope:

• 51% or consensus-layer attacks on the underlying chains.
• User simultaneously losing both device access and cloud recovery.
• Attacks against third-party dApps, DEXs, and services users interact with (mitigated by AI Security Protection tier).

AI Security Protection tier

AI Security Protection — $19.99/mo, coming soon — sits on top of the wallet's foundational security (Shamir + Secure Enclave + RASP) and adds transaction-level threat intelligence for the dApp, DEX, and cross-chain surface that the foundational layer intentionally treats as out of scope. Ten features ship in this tier and each is described in the honest tech that underlies it, not marketing language:

• Address Threat Screening — pre-send screening via the Veyrnox TIP (Threat Intelligence Platform) edge function.
• Phishing Site Detection — curated blocklist check (local seed plus remote feed). Not an ML classifier.
• Risk Scoring — nine-signal, rule-based composite scorer. Deterministic, no learned weights.
• Token Approval Review — view, assess, and revoke ERC-20 and SPL approvals with per-spender risk notes.
• Approval Monitor — periodic background polling (not push) for new approvals and risky incoming transfers.
• AI Risk Notes — per-spender annotations from the TIP screening pipeline.
• Personal AI Advisor — chat interface backed by TIP. Advisory only, not autonomous monitoring.
• Drainer Detection — local heuristics that pattern-match known drainer contract shapes.
• Transaction Explanation — plain-language pre-sign breakdown of what a transaction will do.
• Portfolio Q&A — ask questions about holdings and on-chain activity via the Advisor chat.

See Plans & pricing for the full tier.

Data handling

• Client-side encryption — every shard is encrypted on-device before it leaves.
• No server-side shards. Veyrnox stores no piece of your seed on any server we control.
• No KYC. We do not collect identity documents or transaction histories.

Related

• No seed phrase wallet — how removing seed phrases eliminates the #1 phishing vector
• Shamir wallet — threshold-based seed splitting explained
• Duress wallet — coercion resistance for physical-threat scenarios
• Trezor iOS alternative — hardware-bound signing on iPhone
• How to store crypto safely in 2026 — comprehensive storage guide