Security
Your wallet stays in control
Research does not have to begin with a wallet connection. When an app does need your address or asks you to act, Hexncoin makes that boundary explicit and your wallet remains the final approval point.
- Private keys held
- NoneKeys stay with your wallet.
- Asset custody
- NoneHexncoin does not hold user funds.
- Transaction approval
- RequiredYour wallet confirms signing actions.
Connection
Research, connect, approve
Those are three different steps. Public-data tools can work without a wallet, connecting exposes a public address, and signing remains a separate action presented by your wallet.
Connection
Public address only
Apps that need wallet context can read the public address you connect and the public on-chain information associated with it.
Approval
Your wallet decides
A transaction or token approval stops at your wallet for confirmation. You can reject the request there.
Custody
Funds stay yours
Hexncoin does not take custody of your assets and does not receive your seed phrase, private key or wallet password.
Permissions
Know what each app can ask for
Hexncoin classifies apps by the widest wallet capability they can reach. Moving up a level adds a capability, but never removes your wallet's confirmation step.
- 00
No wallet access
8 of 20 appsPublic-data and utility apps do not need your connected address. They work without a wallet connection.
- 01
Read your public address
12 of 20 appsThese apps can use the address you connected to show public balances, assets and activity. Reading an address does not move funds.
- 02
Ask for transaction approval
8 of 20 appsThese apps can prepare an action for your wallet. Nothing proceeds unless your wallet presents the request and you approve it.
- 03
Ask for a token allowance
1 of 20 appsSome token trades require an allowance before the trade can proceed. Your wallet presents that approval separately so you can review it.
The rule
Review before you approve
Your wallet’s confirmation screen is the final approval point for signing actions. Check the asset, amount, destination and requested permission before approving.
If a request is unexpected or unclear, reject it. A legitimate Hexncoin workflow does not require you to reveal a seed phrase or private key.
Boundaries
What this security model does not remove
- 01
Hexncoin does not claim an independent security audit.
- 02
External protocols, wallets, networks and market services have risks outside Hexncoin’s control.
- 03
Blockchain transactions can be irreversible. Review the destination, amount and approval before signing.
Impersonation warning
Hexncoin has no token
There is no Hexncoin presale, airdrop, allocation or official token contract. Treat pages or messages asking you to buy, claim or connect for a Hexncoin token as impersonation.
Responsible disclosure
Report a vulnerability
If you find a security issue, send enough detail for us to understand the impact and reproduce the problem safely.
Describe the issue
Include the affected page or feature, expected behavior, actual behavior and clear reproduction steps.
Avoid real user assets
Do not test against another person’s wallet, funds or accounts. Use your own environment and the minimum activity needed to demonstrate the issue.