Nifty Protocol/Product/Security

Simulated first.
Signed by you.

Nifty Protocol never holds your keys. Every write is previewed against live state, and agents can only act inside limits you set.

01Principles

01

No custody

We cannot move your funds. Signing happens in your wallet or under an agent key you created.

02

Simulate everything

Each transaction is replayed on forked state before you see a signing prompt.

03

Least privilege

Agent keys carry spend caps, allow-listed contracts and methods, and an expiry.

04

Cross-checked reads

State is read from several providers; mismatches are flagged, not hidden.

02Agent key limits

Spend capMaximum value per transaction and per day, in AUR or any token.
Allow-listOnly the contracts and function selectors you approve.
ExpiryKeys stop working at a time you choose — hours, days or weeks.
RevokeOne click on the signing page, effective at the next block.

03Disclosure

Found a vulnerability? Write to security@niftyprotocol.xyz. We reply within 24 hours and pay bounties for valid reports.

Paste one URL.
Your AI can reach the chain.