Security

Ownership and transfers are enforced by ICP canisters. The browser never holds II seed material. Optional Supabase is a read-optimized mirror only — never spend against mirror balances alone. Service-role keys stay on the Node API host, not the static FE bundle.

Review ledger approvals and max-pay / min-out slippage before confirming market or DAB trades. DEV_AUTH invents a principal without signing — use real Internet Identity for production sends.

If you find a vulnerability, contact @afta_cash on X promptly. We aim to address issues responsibly. Significant updates appear on Status and @afta_cash.