Security
Architecture principles
- Non-custodial by contract: withdrawals only via OwnerCap (your wallet). Details under Vaults.
- The frontend never signs anything sensitive: sign-in is a gas-free message; transactions are signed exclusively by your wallet and go straight to Sui full nodes.
- Separated signer: the operator key lives in an isolated process with no public exposure — the web API itself cannot sign.
- Security gateway: the whole platform runs behind its own WAF edge (TLS, OWASP rule set, rate limits, IP reputation).
- Fail-safe defaults: on RPC issues or missing price data, the system falls back to the conservative option (e.g. tier = Lite, no rebalances on stale data).
Contracts (Sui Mainnet)
All packages are verifiable on-chain:
| Package | Address |
|---|---|
| Core (Vaults, Sessions, Policy) | 0xf3c4ec1f…341d9ed3 |
| Token ($XER, veXER, Fee Splitter) | 0xede3358f…e1c137d9 |
| LP Adapter (strategy gateway) | 0xd428166b…008861b3 |
How to recognize a real XERION site
| Purpose | Domain |
|---|---|
| Website | xerion.finance |
| App (the only place you ever sign) | app.xerion.finance |
| Docs | docs.xerion.finance |
The login message always starts with app.xerion.finance. Never sign anything coming from a different domain. We never ask for your seed phrase — nobody legitimate ever does.
A short checklist:
- Check the URL bar, not just the page title or logo.
- Read the wallet's sign-in message before approving — it must name
app.xerion.finance. - Bookmark
app.xerion.financeyourself instead of following links from search results, DMs, or ads. - If in doubt, don't sign. Close the tab and navigate there manually.
Honest state: audit and multisig are on the roadmap
XERION's Move contracts are live on Sui Mainnet but not yet externally audited. An external audit and a multisig + timelock on admin rights (UpgradeCap, operator hub) are planned before larger third-party deposits are onboarded. Until then, deposit accordingly.
What if XERION's servers go down?
Nothing about your funds changes: they sit on-chain in your own vault. See FAQ and Vaults for what you can still do.