🔐Security

Learn more about the TokenSight security model.

At TokenSight, security is not just a feature, it's our foundation.

We've meticulously designed TokenSight with a strong focus on safeguarding your assets and providing you with full control over your investments. By prioritising your fund security, we are minimising the risk associated with crypto trading.

Our innovative approach incorporates our focused research in Account Abstraction which utilises WebAuthn signatures, resulting in a seamless user experience that's both user-friendly and, most importantly, doesn't compromise the safety of your funds.

With TokenSight, you can trust that your assets are fully in your control, allowing you to trade with confidence and peace of mind.

You can create different types of wallets on the platform. We currently support Simple and Secure Wallets (recommended), while we will be enabling more wallet types over the coming months.


Secure Wallets

TokenSight Secure Wallets are designed in partnership with Turnkey to provide a fully self-custodial experience.

The wallet is generated within a Secure Enclave managed by Turnkey. Only can access that wallet using the same passkey you used to generate it. In the unlikely event that TokenSight gets hacked, the hacker will not be able to access your private key, nor your seed phrase. You can read more about security of your keys in the following links:

When it comes to trading, TokenSight allows you to manage granular trading permissions, as explained in Secure Wallets. You can allow TokenSight to perform different types of transactions on your behalf, and you can remove these permissions anytime.

Recommendations:

  • Backup the seed phrase of the wallet and store it in a secure place.

  • You need to keep track of the trading permissions, and you only give TokenSight the necessary permissions.

  • If you do not plan to trade on TokenSight for a while, it's recommended to turn off all the permissions, and turn them on when you get back.

When creating a Secure Wallet, it's recommended to add a recovery email, which will be used to change the passkey associated with that wallet.

The recovery/change passkey flow will be available soon.

Smart Accounts

We will be introducing this feature in the coming months as soon as we've completed the necessary audits and added the final refinements. This feature is set to grant you complete authority over your assets without the need to manage private keys, thereby minimising risk.

You'll have the convenience of trading on TokenSight using your passkeys and ERC4337 wallets. You'll only need to grant TokenSight limited access through session keys for automated fund trading, and the platform takes care of the rest.

Last updated