Security / Architecture
Defence
Defence
in depth.
Three rings of protection: cryptography at the core, a hardened runtime around it, and a defended backend behind it.
Ring 1
Cryptography
- BIP-39 mnemonic (seed phrase) generation.
- PBKDF2 key derivation — 100,000 iterations, SHA-256.
- AES-GCM 256 for the encrypted vault.
- crypto.getRandomValues for all entropy — never Math.random in security paths.
- RFC 6979 deterministic ECDSA.
Ring 2
Runtime protection
- Chrome Extension Manifest V3 — the newest security standard.
- window.ethereum is frozen — malicious sites cannot hijack the provider.
- Strict Content-Security-Policy — exfiltration blocked at the browser level.
- Auto-lock on idle, on browser close, and on tab switch from seed screens.
Ring 3
Backend protection
- Prompt-injection defence — blockchain data is sanitised before the AI ever sees it.
- Zod validation on every critical response.
- Allowlist-mirror for trust-critical registries.
NOX NOX NOX
Free · No account · Pre-launch
Stop trusting
Stop trusting
blind wallets.
Self-custody, AI-protected, every chain. Install Nox and let Guardian watch your back.