Wallet Security Principles

Rules for a wallet experience that does not exist yet.

• Never ask a user to paste a seed phrase into an EraX website.
• Treat a connection and a transaction as separate approvals.
• Show the network name before signing.
• Expect phishing sites to copy the interface. The wallet prompt is the source of truth for what will be signed.
• Do not claim insurance, audits, or recovery of lost keys.