Security notes
The trust boundary, and the risks that stay with you.
Invisio is non-custodial by construction rather than by policy. There is no key on the Invisio side that could move your assets, so there is nothing to misuse or lose.
The trust boundary
| Invisio can | Invisio cannot |
|---|---|
| Read public chain data | Move funds without your signature |
| Build a transaction | Sign on your behalf |
| Submit a signed transaction | Change a transaction after it is signed |
| Report a transaction's status | Reverse a confirmed transaction |
No Invisio program
Invisio has not deployed a program to Solana. Transactions it builds call the System program, the SPL Token program and Jupiter's routing programs. There is no Invisio contract holding assets, and no upgrade authority that could change one.
Risks that remain
- Wallet compromise. Anyone with your seed phrase has your funds.
- Third-party program risk in the venues a trade routes through.
- Bridge risk for assets issued on another chain.
- Market risk, including price movement between quote and confirmation.
- Phishing. Check the address bar before connecting a wallet anywhere.
Invisio has not commissioned a third-party audit, and there is no insurance against loss. Both statements are here because their absence matters.