SHI2Your keys never leave your browser
SHI2 Wallet is non-custodial in the literal sense: there is no server that could hold your funds even if someone demanded it. Seed phrases are generated in your browser, encrypted there, and stored only in that browser’s own storage.
- Seeds are sealed with
AES-256-GCM, and the key is stretched from your password withPBKDF2at 310,000 iterations, the OWASP floor for SHA-256. That figure is read from the constant the wallet actually uses, so this sentence cannot drift away from the code. - The encrypted keystore lives in
localStorage. It is never transmitted. There is no account, no login, and no telemetry. - Locking the wallet clears the decrypted seed from memory, and locking in one browser tab propagates to every other open tab.
- We never ask for your seed phrase. No support process, now or ever, will require it. Anyone who asks is stealing from you.
Because no one else holds your keys, no one else can restore them. If you lose your password and your recovery phrase, your funds are gone permanently. That is the cost of custody being yours alone, and we would rather say it plainly than hide it.
Audit status, stated plainly
SHI2 Wallet has not been audited by a third party. PLANNED
No security firm has reviewed the contracts or the wallet code. There is no audit report, and any page, post, or person claiming otherwise is not speaking for this project.
What has been done instead
This is not a substitute for an audit. It is what exists today, described accurately so you can weigh it yourself.
- Adversarial review rounds over the money paths, the inheritance rites, the keystore, and the dApp gateway, with every confirmed finding fixed before release.
- An automated test suite that runs on every change, including regression gates written specifically to stop a previously fixed defect from returning.
- Contracts exercised against a local chain, including hostile-token cases: tokens that lie about their balance, refuse transfers without reverting, or take a fee on transfer.
Unaudited smart contracts can contain flaws that no internal review finds. Until an independent audit is published on this page, treat the inheritance features as experimental and do not commit funds you cannot afford to lose.
Deployed contracts
No contracts are deployed to any public network yet. BUILT · AWAITING DEPLOYMENT
The inheritance protocol is written, tested, and ready, but it does not exist on a live chain. Until it does, the Tablet, the dead man’s switch, and the Sentinel cannot be used by anyone, including us. That holds on BNB Smart Chain, the wallet’s home, as on every other network, and it holds for the SHI2Router as well. When deployment happens, every address will be listed here and verified on its block explorer, so you can read the source that is actually running.
Third-party contracts we route through
Swaps and cross-chain transfers do not use our own contracts. They are routed through the LI.FI aggregator, whose diamond contract is deployed and audited independently of this project. We do not control it and do not claim its audits as ours.
Reporting a vulnerability
If you have found a flaw, we want to hear it before anyone else does. Write to [email protected]. A machine-readable copy of this contact lives at /.well-known/security.txt per RFC 9116.
- Please include what you did, what happened, and what you expected instead.
- If the wallet itself broke on you, the error screen has a Copy a report button. It builds the technical details for you and puts them on your clipboard. It carries no addresses, no balances and no keys, and nothing is sent unless you send it. That is how a wallet with no telemetry still learns about its own bugs.
- We will acknowledge your report within 72 hours and tell you honestly whether we can fix it and when.
- Please give us 90 days before public disclosure, and do not test against other people’s funds or accounts. Never send us a seed phrase or private key, not even your own test one.
- There is no paid bounty programme yet. We will not pretend otherwise to attract reports, and we will credit you here if you want the credit.
Making sure you are on the real site
The single most common way people lose funds is a convincing copy of a wallet they trust. A clone of this site can look identical and still be a trap.
- The only official address is
shi2wallet.app. Bookmark it, and reach it from your bookmark rather than from a search result or a link someone sent you. - We will never DM you first, never run a “wallet validation”, and never ask you to connect for an airdrop.
- A real wallet screen never asks for your seed phrase in order to receive something. If a page asks, close it.
Source and licence
SHI2 Wallet is licensed under the GNU Affero General Public License v3.0. If someone distributes a modified copy of this wallet, that licence obliges them to publish their source. A wallet build you cannot read the source of is one you should not put money into. Ours included.