> For the complete documentation index, see [llms.txt](https://docs.noxcat.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.noxcat.io/noxcat-wallet/security-model.md). # Security Model The **NOXCAT Wallet** is designed to protect users throughout the full lifecycle of digital asset ownership. Security is not limited to transaction signing. It includes wallet creation, identity access, key protection, recovery, social interactions, emergency situations, and long-term asset continuity. The goal is to preserve the guarantees of self-custody while reducing the risks that commonly prevent mainstream users from safely using Web3. *** ## Core Security Principles ### Self-Custody NOXCAT is built on a self-custodial model. Users retain control over their assets, and NOXCAT does not act as a centralized custodian of user funds. This means: * Users own their wallets. * Users authorize transactions. * Assets remain controlled by wallet-level cryptographic permissions. * NOXCAT does not unilaterally move user funds. ### Local Signing Sensitive transaction approvals are performed locally through the user’s wallet environment. Before any on-chain transaction is executed, the user must authorize the action. This ensures that asset movement remains tied to explicit user approval rather than centralized backend control. ### Key Protection Private keys and sensitive wallet credentials must be protected at all times. The wallet architecture is designed to reduce direct user exposure to raw private keys while maintaining self-custodial ownership. Key protection may include: * Encrypted storage * Device-level security * Biometric access * Secure backup flows * Recovery verification The objective is to prevent accidental exposure while keeping ownership in the user’s control. *** ## Identity Security The NOXCAT Wallet uses a UID-based identity layer to simplify user interactions. Because identity becomes the gateway to wallet access, identity security is critical. Identity-level protection may include: * Email or social login verification * Device verification * Multi-factor authentication * Risk-based checks * Recovery delays for sensitive actions This creates a more familiar access experience while protecting against unauthorized account recovery or takeover attempts. *** ## Backup & Recovery Traditional self-custody often creates a difficult trade-off: * If users lose their seed phrase, they may lose access forever. * If recovery is too easy, attackers may exploit it. NOXCAT is designed to improve this experience by supporting secure recovery mechanisms that reduce permanent loss risk while maintaining strong protection against unauthorized access. Recovery may involve: * Identity verification * Device confirmation * Additional security checks * Time-delay protection * User notifications This approach helps protect users from both accidental loss and malicious recovery attempts. *** ## Security Delay For high-risk actions, the wallet may apply a **security delay** before execution. This is designed to reduce the impact of account compromise or coercive recovery attempts. Security delays may apply to actions such as: * Wallet recovery * Backup changes * Sensitive security setting updates * Large-value withdrawals * Emergency mode changes During the delay window, the user may receive alerts and take action if the request was unauthorized. *** ## Transaction Protection Every transaction represents a potential risk point. The wallet is designed to reduce common transaction risks, including: * Sending assets to the wrong address * Signing malicious approvals * Interacting with unsafe contracts * Using the wrong network * Paying unexpected gas fees * Approving unlimited token allowances without understanding the risk Transaction protection may include: * Clear confirmation screens * Recipient identity verification * Address risk detection * Contract interaction warnings * Token approval visibility * Network and fee transparency The goal is to make risky actions understandable before users approve them. *** ## Social Transaction Safety Because NOXCAT introduces social finance, transaction safety must extend beyond addresses. UID-based interactions reduce the likelihood of address-copying mistakes, but social interactions also introduce new risks such as impersonation, phishing, and fraudulent requests. The wallet may protect users through: * Verified identity indicators * Contact confirmation * Transaction context in chat * Suspicious behavior warnings * Clear distinction between communication and execution Communication may help users coordinate transactions, but asset movement still requires wallet-level confirmation. *** ## Legacy Timer (Upcoming) Self-custody gives users full ownership, but it also creates long-term continuity challenges. If a user loses access permanently or passes away unexpectedly, assets may become inaccessible forever. The **Legacy Timer** is designed as a future asset continuity mechanism that allows users to define inheritance or recovery logic under predefined conditions. Potential use cases include: * Digital asset inheritance * Long-term inactivity recovery * Trusted guardian escalation * Estate planning for self-custodial assets The goal is to make self-custody sustainable across real-life scenarios, not only day-to-day usage. *** ## Security as a System NOXCAT does not treat security as a single feature. It is a layered system across: * Identity * Device * Wallet * Transaction * Social interaction * Recovery * Protocol execution * Long-term asset continuity Each layer is designed to reduce a different category of risk while preserving the user’s ownership and freedom. *** ## Security Roadmap The NOXCAT Wallet security model will continue evolving alongside the ecosystem. Future enhancements may include: * Advanced account abstraction * Session keys * Spending limits * Multi-factor transaction approval * Social recovery * Smart account policies * Deeper contract risk analysis * AI-assisted fraud detection * Enhanced anti-coercion features The long-term objective is to make self-custody safer, more intuitive, and more resilient for everyday users. *** ## Summary The NOXCAT Wallet security model is built around one principle: **Users should control their assets without being forced to manage every security risk alone.** By combining self-custody, local signing, identity security, recovery protection, transaction safeguards, and future anti-coercion mechanisms, NOXCAT aims to create a wallet experience that is both secure and usable. Security should not make finance harder. It should make users feel protected while they do more.