Security

Plain words about custody, what Signal records, and how anyone checks it.

Who holds your key

Signal never has your private key. A wallet you connect stays in that wallet. An embedded wallet is created and held by Privy, and Signal only ever asks it to sign; the key is never shown to Signal.

If you export an embedded key and paste it into another app, that app has everything. From that moment nothing on this site can protect the wallet, and neither can Privy. Treat an exported key as a new custodian, and only give it to software you would trust with everything in the wallet.

The ledger

Every transaction this site builds is written to a ledger before your wallet is asked to sign: which wallet, to which contract, a fingerprint of the call, the amount, the label. When the wallet answers, the transaction hash is attached. Rows are chained: each carries the hash of the one before it, so a row cannot be changed or removed later without breaking every row after it. The rows are public and never deleted; your address and browser are kept apart from the chain for thirty days, for reports, and then dropped.

That gives one clean answer for any transaction on HyperEVM: built by Signal, or not. A transfer that drained a wallet and has no row here was signed somewhere else.

Verify it yourself

The check above reads /api/proof/tx/<hash>. The day's root is at /api/proof/day/YYYY-MM-DD, and the rows at /api/proof/rows?from=1. Each row's sha is sha256 of the previous sha, a bar, and the row's chained fields as sorted compact JSON. Recompute it from the rows and you have checked the ledger without trusting this page.

If something moved that you did not send

1. Stop using that key everywhere. Move what is left to a wallet whose key has never been typed into anything.
2. Run the check above on the transaction. It tells you whether Signal built it.
3. Message us with the wallet and the hash. You get the ledger rows, the transfers in and out, and the signer fingerprint of each transaction, usually within the hour.
4. If the key was exported to another app, delete that app and report it to its store. The key it saw is gone for good.

Signal never

• asks for a seed phrase or a private key, in chat, by email, or on any page;
• messages you first about a prize, a refund, or a "wallet check";
• asks you to import a key into another app to "unlock" anything.

A send to an address that starts and ends like one you have used, but differs in the middle, is refused by the Send sheet. That pattern is address poisoning, and it is the most common way funds leave by hand.