Security Approach
Last updated: October 15, 2026
On this page
Philosophy
For us, security is the foundation of everything we build. Our Security department works from three practices and one flagship product line:
- Cryptographic security: standards-based protocols, including AES-256 encryption, AES-256-GCM authenticated encryption, elliptic curve cryptography and zero-knowledge proofs.
- Smart contract audits: code review by external security firms before contracts reach mainnet.
- Monitoring: threat detection and response, with AI-assisted anomaly detection.
- Cold storage platform: XColdPro, our air-gapped cold wallet software.
Offline-first and air-gapped
The recurring design idea across our security products is that the signing environment is the real perimeter. We design our products for offline-first operation, so that keys do not need to touch a connected machine. Our October 2026 blog analysis of recent drains makes the same argument; see Blog and Insights.
XColdPro is software-first and hardware-agnostic: it runs on hardware you already own, or on dedicated air-gapped systems for maximum isolation. No proprietary device is required and there is no wireless attack surface to defend.
How XColdPro protects keys
XColdPro is live (Stable V1.0, Windows and macOS). As described on xcoldpro.com, its security rests on:
- Encryption: AES-256-GCM, an authenticated cipher, so tampering with stored data is detected.
- Air-gap isolation: WiFi, Bluetooth and Ethernet are severed; keys are generated and used only inside the isolated environment, and only unsigned and signed transaction data crosses the boundary.
- Memory hygiene: decrypted key material exists in memory only while the wallet is unlocked and is dropped on lock, exit or EMBO.
- Edition protocols on top of the shared foundation:
| Edition | Protocols |
|---|---|
| Frost | Essential air-gapped storage, no additional protocols |
| HellBound | XBurnPro, Omega, Lazarus |
| Nyxor | HellBound protocols plus SeedVault (Shamir recovery), Citadel (M-of-N multisig) and BlackHole (duress protection) |
Duress protection: BlackHole is part of the Nyxor edition. It is opt-in and trades portability for resistance to coercion; operational details are for licensed users only. Decoy Wallets ship in every edition. See XColdPro for details.
Limits: cold storage does not protect a device already compromised before wallet creation, and anyone holding the seed can spend outside XColdPro (details).
Seed generation
XColdPro generates seeds from the operating system's cryptographically secure random number generator, with no proprietary generator and no hidden fallback. If secure entropy is unavailable, generation fails rather than quietly reducing the key space. We explain this on our blog.
Credential security
XVaultPro extends our offline-first approach to passwords and secrets, with AES-256-GCM encryption and scoped access controls for AI agents. See XVaultPro.
Contact
You can send questions for our Security department through the channels in Contact and Careers.