Security

Security at Alverum

Non-custodial by design. Alverum never controls user funds — every payment is signed inside the user's own wallet.

Alverum support will never ask for your seed phrase, private key or wallet recovery phrase. Anyone requesting these is impersonating our team.

Wallet Approval Principles

Alverum only reads a wallet's public address after the user connects. Every state change requires an explicit signature from the wallet. Alverum cannot spend, move, approve or unstake funds without an on-chain signature from the connected wallet.

Private-Key Protection

Store seed phrases offline, ideally in a hardware wallet or a secure backup.
Never enter your seed phrase on any website, popup, form or chat.
Beware of screenshots, cloud notes and email drafts containing wallet keys.
Prefer hardware wallets for accounts holding meaningful value.

Transaction Verification

Read the summary

Verify the target address, amount, token and network before signing.

Approve minimum

Prefer exact-amount approvals over unlimited allowances when possible.

Check the URL

Confirm you're on alverum.net before connecting your wallet.

Slow down

If something feels rushed or urgent, stop and re-verify.

Phishing Warnings

Phishing sites often imitate real projects using near-identical URLs, ads and social messages. Never connect your wallet to a site you reached through an unsolicited link, direct message or ad. Always type the domain manually or use a trusted bookmark.

Smart-Contract Risks

All on-chain applications carry smart-contract risk. Even audited contracts can contain bugs, and interacting with unfamiliar contracts can expose you to malicious behavior such as unlimited token allowances. Use Alverum only within the flows presented in the official app, and review any approvals your wallet displays.

Responsible Security Reporting

If you believe you have found a vulnerability, please report it privately by email to support@alverum.net. Do not publish or exploit the issue before we have had a reasonable opportunity to investigate. Provide clear reproduction steps and any relevant transaction hashes or logs.

Support Safety Guidance

Legitimate support conversations start from the official Alverum website.
Alverum support will never ask for a seed phrase or private key.
Alverum support will never ask you to install remote-access software.
Alverum support will never DM you first on social media.

Learn more about the underlying technology, read the whitepaper or contact us via the official channels.

If you suspect your wallet is compromised, move remaining assets to a new wallet you fully control and revoke outstanding token approvals for the compromised address before contacting support.