> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aeon.so/llms.txt
> Use this file to discover all available pages before exploring further.

# Product Security

> Defense-in-depth architecture behind Aeon

We recognize that both we and our customers are high-value targets for sophisticated attackers. That's why we designed and built our system to withstand even the most advanced threats by combining robust cryptographic, hardware, and software security measures.

## Security is Our Top Priority

To create the most secure wallet for organizations and institutional crypto investors, we go beyond existing industry standards. Our commitment to exceeding these benchmarks has resulted in what we believe to be the most secure crypto wallet available today.

## Multi-Party Computation at the Core

Securing our users' private keys and ensuring their exclusive control over funds is our top priority. Unlike traditional hot wallets, which store keys in browser extensions and are susceptible to system compromises, we utilize multi-party computation (MPC).

### How MPC Works

This advanced cryptographic approach divides the private key into multiple parts, ensuring there is no single point of failure:

1. **Key Division**: Each private key is split into multiple keyshares
2. **Individual Signing**: Users individually sign their portion of transactions
3. **Signature Combination**: Individual signatures are combined to produce the final signature
4. **No Complete Key**: The complete private key never exists in one place at any time

<Warning>
  This prevents attackers from accessing complete private keys while enabling
  users to stay in full control of funds according to predetermined rules.
</Warning>

### MPC Provider Options

At Aeon, we believe customers should have the freedom to choose how they want to protect their assets. We offer two industry-leading models:

<Tabs>
  <Tab title="MPC (Sodot)">
    **Sodot** ([sodot.dev](http://sodot.dev/)) provides highly performant MPC key management infrastructure, purpose-built for self-custodial solutions.

    **Key Features:**

    * Infrastructure never signs without authorization from our fully on-chain business logic
    * Verifies state proofs and submits results to Trusted Execution Environments
    * Signing only occurs if on-chain business logic authorizes it
    * Faster signing times
    * Supports backing up of user keyshares for recovery

    **Team Expertise:**
    Co-founded by Ido Sofer, Shalev Keren, Matan Hamilis, and Elichai Turkel, bringing over 20 years of experience in MPC and security across elite cybersecurity intelligence units and academia.

    **Trusted By:** eToro, Flowdesk, Exodus, and Bitcoin.com
  </Tab>

  <Tab title="dMPC (Ika)">
    **Ika** (ika.xyz), formerly dWallet Network, is a parallel Multi-Party Computation network offering sub-second latency and zero-trust security.

    **Key Features:**

    * Decentralized network of hundreds of validators
    * Safeguards keyshares in encrypted form using homomorphic encryption
    * Scalability up to 10,000 transactions per second
    * Censorship resistance due to decentralization
    * Particularly suited for fully decentralized organizations

    **Team Expertise:**
    Co-founded by Omer Sadika (elite cybersecurity intelligence + cybersecurity unicorn founder), David Lachmish, and Yehonatan Cohen Scaly. Over a dozen cryptographers including PhD holders and a Gödel Prize laureate.
  </Tab>
</Tabs>

## Fully On-Chain Business Logic

<CardGroup cols={2}>
  <Card title="Immutable Governance" icon="shield-check">
    All workspace interactions governed by immutable, fully on-chain logic
    deployed on Sui blockchain
  </Card>

  <Card title="User Consent Required" icon="user-check">
    Any upgrades or chain additions require explicit user consent - we cannot
    initiate changes unilaterally
  </Card>

  <Card title="On-Chain Assembly" icon="code">
    All transaction bytecode assembly performed entirely on-chain, preventing
    external modification
  </Card>

  <Card title="Privacy Preserved" icon="eye-slash">
    Personal data stored off-chain for privacy, with on-chain commitments
    ensuring data integrity
  </Card>
</CardGroup>

### Smart Contract Security

Our smart contracts are written in **Move** - a language purpose-built for securing high-value assets:

* **Rigorous Auditing**: Contracts undergo thorough security audits
* **Formal Verification**: Most security-critical components are formally verified
* **Cryptographic Proofs**: Only transactions authorized by smart contracts are signed
* **Dual Authorization Protection**: Smart contract approval followed by user co-signing ensures that even if there are bugs in contract logic, funds remain protected by the dual authorization requirement

<Note>
  We are the only MPC-based custody provider that mandates user consent for
  changes to business-critical flows.
</Note>

## Authentication and Authorization

We employ a dual-approach authentication system to ensure robust security for both off-chain and on-chain operations.

<CardGroup cols={2}>
  <Card title="Non-Critical Operations" icon="computer">
    **Google zkLogin** or **MetaMask** for accessing web console and private user information

    **Capabilities:**

    • Web console access for requesting transactions

    • Proposing workspace changes

    • Viewing private data
  </Card>

  <Card title="Critical Operations" icon="mobile">
    **Mobile device secure enclave** with biometric authentication for fund movements and critical operations

    **Capabilities:**

    • Fund movements and transfers

    • Voting on proposals

    • Executing any workspace change
  </Card>
</CardGroup>

## Advanced Wallet Security

### Transaction Enrichment

<Warning>
  When navigating dApps, users must verify exact transaction details to ensure
  safety and mitigate risks from phishing attacks, malicious dApps, or supply
  chain vulnerabilities.
</Warning>

For every transaction on any chain, we provide:

<CardGroup cols={3}>
  <Card title="Transaction Effects" icon="list">
    Detailed breakdown of what the transaction will accomplish
  </Card>

  <Card title="Contract Addresses" icon="address-card">
    All interacting smart contract addresses clearly displayed
  </Card>

  <Card title="Balance Changes" icon="scale-balanced">
    Exact resulting balance changes before and after execution
  </Card>
</CardGroup>

### Admin Quorum

<Warning>
  To prevent malicious administrators or malware from altering sensitive
  operations, every security-critical operation must be approved by the admin
  quorum.
</Warning>

This ensures:

* **No Single Point of Failure**: Governance doesn't rely on individual administrators
* **Protection Against Internal Threats**: Multiple approvals required for policy changes
* **Malware Resistance**: Compromised individual devices cannot alter critical settings
* **Fund Protection**: Prevents unauthorized access to organizational assets

## Internal Security

Even if our infrastructure is compromised, attackers cannot steal user funds due to our MPC, secure enclave, and on-chain logic architecture.

<CardGroup cols={3}>
  <Card title="Code Auditing" icon="magnifying-glass">
    Thorough business logic audits by third-party security firms and formal
    verification for critical components
  </Card>

  <Card title="Development Standards" icon="code">
    Every line of code requires peer review by two reviewers with additional
    auditing for security-critical changes
  </Card>

  <Card title="Automated Security" icon="robot">
    Continuous integration with automated security scanning and regular
    penetration testing
  </Card>

  <Card title="Production Access" icon="lock">
    Access strictly limited to dedicated, isolated machines accessible only by
    Aeon founders
  </Card>

  <Card title="Team Security" icon="users">
    Hardware security keys required for all team members with multi-factor
    authentication for internal systems
  </Card>

  <Card title="Infrastructure Updates" icon="server">
    All infrastructure updates require confirmation on secure machines with
    strict approval processes
  </Card>

  <Card title="SOC 2 Compliance" icon="certificate">
    Currently in progress for operational security standards with comprehensive
    audit trails
  </Card>

  <Card title="Incident Response" icon="shield-exclamation">
    Established procedures for security event handling with ongoing third-party
    assessments
  </Card>

  <Card title="Security Training" icon="graduation-cap">
    Regular security training and awareness programs for all team members
  </Card>
</CardGroup>

<Note>
  Security is an ongoing process. We publish regular security updates and audit
  reports. Contact [security@aeon.so](mailto:security@aeon.so) for the latest security documentation.
</Note>