Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Security Model

Security Without Compromising Usability

The NOXCAT Wallet is designed to protect users throughout the full lifecycle of digital asset ownership.

Security is not limited to transaction signing. It includes wallet creation, identity access, key protection, recovery, social interactions, emergency situations, and long-term asset continuity.

The goal is to preserve the guarantees of self-custody while reducing the risks that commonly prevent mainstream users from safely using Web3.

Core Security Principles

Self-Custody

NOXCAT is built on a self-custodial model.

Users retain control over their assets, and NOXCAT does not act as a centralized custodian of user funds.

This means:

  • Users own their wallets.

  • Users authorize transactions.

  • Assets remain controlled by wallet-level cryptographic permissions.

  • NOXCAT does not unilaterally move user funds.

Local Signing

Sensitive transaction approvals are performed locally through the user’s wallet environment.

Before any on-chain transaction is executed, the user must authorize the action.

This ensures that asset movement remains tied to explicit user approval rather than centralized backend control.

Key Protection

Private keys and sensitive wallet credentials must be protected at all times.

The wallet architecture is designed to reduce direct user exposure to raw private keys while maintaining self-custodial ownership.

Key protection may include:

  • Encrypted storage

  • Device-level security

  • Biometric access

  • Secure backup flows

  • Recovery verification

The objective is to prevent accidental exposure while keeping ownership in the user’s control.

Identity Security

The NOXCAT Wallet uses a UID-based identity layer to simplify user interactions.

Because identity becomes the gateway to wallet access, identity security is critical.

Identity-level protection may include:

  • Email or social login verification

  • Device verification

  • Multi-factor authentication

  • Risk-based checks

  • Recovery delays for sensitive actions

This creates a more familiar access experience while protecting against unauthorized account recovery or takeover attempts.

Backup & Recovery

Traditional self-custody often creates a difficult trade-off:

  • If users lose their seed phrase, they may lose access forever.

  • If recovery is too easy, attackers may exploit it.

NOXCAT is designed to improve this experience by supporting secure recovery mechanisms that reduce permanent loss risk while maintaining strong protection against unauthorized access.

Recovery may involve:

  • Identity verification

  • Device confirmation

  • Additional security checks

  • Time-delay protection

  • User notifications

This approach helps protect users from both accidental loss and malicious recovery attempts.

Security Delay

For high-risk actions, the wallet may apply a security delay before execution.

This is designed to reduce the impact of account compromise or coercive recovery attempts.

Security delays may apply to actions such as:

  • Wallet recovery

  • Backup changes

  • Sensitive security setting updates

  • Large-value withdrawals

  • Emergency mode changes

During the delay window, the user may receive alerts and take action if the request was unauthorized.

Transaction Protection

Every transaction represents a potential risk point.

The wallet is designed to reduce common transaction risks, including:

  • Sending assets to the wrong address

  • Signing malicious approvals

  • Interacting with unsafe contracts

  • Using the wrong network

  • Paying unexpected gas fees

  • Approving unlimited token allowances without understanding the risk

Transaction protection may include:

  • Clear confirmation screens

  • Recipient identity verification

  • Address risk detection

  • Contract interaction warnings

  • Token approval visibility

  • Network and fee transparency

The goal is to make risky actions understandable before users approve them.

Social Transaction Safety

Because NOXCAT introduces social finance, transaction safety must extend beyond addresses.

UID-based interactions reduce the likelihood of address-copying mistakes, but social interactions also introduce new risks such as impersonation, phishing, and fraudulent requests.

The wallet may protect users through:

  • Verified identity indicators

  • Contact confirmation

  • Transaction context in chat

  • Suspicious behavior warnings

  • Clear distinction between communication and execution

Communication may help users coordinate transactions, but asset movement still requires wallet-level confirmation.

Legacy Timer (Upcoming)

Self-custody gives users full ownership, but it also creates long-term continuity challenges.

If a user loses access permanently or passes away unexpectedly, assets may become inaccessible forever.

The Legacy Timer is designed as a future asset continuity mechanism that allows users to define inheritance or recovery logic under predefined conditions.

Potential use cases include:

  • Digital asset inheritance

  • Long-term inactivity recovery

  • Trusted guardian escalation

  • Estate planning for self-custodial assets

The goal is to make self-custody sustainable across real-life scenarios, not only day-to-day usage.

Security as a System

NOXCAT does not treat security as a single feature.

It is a layered system across:

  • Identity

  • Device

  • Wallet

  • Transaction

  • Social interaction

  • Recovery

  • Protocol execution

  • Long-term asset continuity

Each layer is designed to reduce a different category of risk while preserving the user’s ownership and freedom.

Security Roadmap

The NOXCAT Wallet security model will continue evolving alongside the ecosystem.

Future enhancements may include:

  • Advanced account abstraction

  • Session keys

  • Spending limits

  • Multi-factor transaction approval

  • Social recovery

  • Smart account policies

  • Deeper contract risk analysis

  • AI-assisted fraud detection

  • Enhanced anti-coercion features

The long-term objective is to make self-custody safer, more intuitive, and more resilient for everyday users.

Summary

The NOXCAT Wallet security model is built around one principle:

Users should control their assets without being forced to manage every security risk alone.

By combining self-custody, local signing, identity security, recovery protection, transaction safeguards, and future anti-coercion mechanisms, NOXCAT aims to create a wallet experience that is both secure and usable.

Security should not make finance harder.

It should make users feel protected while they do more.

PreviousWallet Architecture
NextSocial Finance

Last updated

Was this helpful?