Nifty Protocol/Product/Security
Simulated first.
Signed by you.
Nifty Protocol never holds your keys. Every write is previewed against live state, and agents can only act inside limits you set.
01Principles
01
No custody
We cannot move your funds. Signing happens in your wallet or under an agent key you created.
02
Simulate everything
Each transaction is replayed on forked state before you see a signing prompt.
03
Least privilege
Agent keys carry spend caps, allow-listed contracts and methods, and an expiry.
04
Cross-checked reads
State is read from several providers; mismatches are flagged, not hidden.
02Agent key limits
Spend capMaximum value per transaction and per day, in AUR or any token.
Allow-listOnly the contracts and function selectors you approve.
ExpiryKeys stop working at a time you choose — hours, days or weeks.
RevokeOne click on the signing page, effective at the next block.
03Disclosure
Found a vulnerability? Write to security@niftyprotocol.xyz. We reply within 24 hours and pay bounties for valid reports.