Security

SILVRA is built as financial software. Here is how we protect your transfers.

Non-custodial by design

Your funds never pass through SILVRA. Transactions are signed only in your wallet. We cannot move your assets, and we never have the ability to.

We never touch your keys

SILVRA never requests, collects, or stores private keys, recovery phrases, or signing secrets. Any site or message that asks you for these is a scam.

Strict asset allowlist

Only verified networks and token contracts are supported, defined server-side. We never accept an arbitrary contract address or identify a token by ticker alone.

Server-authoritative fees

Service fees are calculated on the server. The browser cannot set or alter them, and the recipient address is never changed by SILVRA.

On-chain verification

A transaction is only shown as confirmed after its receipt is verified against the correct chain. A database record is never treated as proof of success.

Defense in depth

Hardened HTTP headers, a strict Content Security Policy, CSRF protection on state-changing endpoints, prepared statements, input validation, and server-side rate limiting.