Skip to main content

Enterprise-Grade Security

At Termi, security is our top priority. We’ve implemented multiple layers of protection to ensure your assets and data are safe.

Platform Security

Smart Contract Security

• All smart contracts are audited
• Ongoing bug bounty programs
• No custodial access to your assets

User Control

You stay in control. Your wallet = your funds.

User Best Practices

Essential Guidelines

• Only connect your wallet from app.termi.fun
• Never share your seed phrase
• Double-check URLs and Discord links
• Use a cold wallet for large balances

Stay Vigilant

Security starts with you. Always verify before you trust.

Wallet Management System

Our auto-generated wallets feature:
  • Hardware security module (HSM) integration
  • Multi-party computation (MPC) for key generation
  • Zero-knowledge architecture
  • Encrypted key sharding across multiple secure locations
We implement:
  • Advanced encryption at rest and in transit
  • Regular key rotation policies
  • Automated backup systems
  • Secure recovery mechanisms

Session Security

Session Management

• Encrypted session tokens
• Automatic session timeouts
• Device fingerprinting
• Anomaly detection

Access Control

• Role-based permissions
• Multi-factor authentication
• IP-based restrictions
• Audit logging

Authentication Framework

Multi-Layer Authentication

Secure wallet connections with:
  • EIP-4361 (Sign-In with Ethereum) compliance
  • Message signing verification
  • Nonce-based replay protection
  • Chain-specific signature validation
Protected social login through:
  • OAuth 2.0 implementation
  • PKCE flow for mobile
  • State parameter validation
  • Cross-site request forgery protection

Data Protection

Storage Security

At-Rest Encryption

AES-256 encryption for all sensitive data storage

In-Transit Protection

TLS 1.3 with perfect forward secrecy

Backup Security

Encrypted, distributed backup system

Compliance & Auditing

• SOC 2 Type II compliance
• Regular penetration testing
• Bug bounty program
• Third-party security audits
• 24/7 security monitoring
• Automated threat detection
• Incident response team
• Regular security assessments
🔒 Security Reminder: Always verify you’re using official Termi links and never share your private keys or seed phrases.