Is Aurus safe to use?

Aurus is self-custodial. Your keys are generated on your phone, stored on your phone, and never sent to us or anyone else. There's no Aurus server with a copy of your wallet to hack, freeze, or lose. Your SOL is on-chain, under a key only you hold.

That covers the biggest risk in crypto, which is trusting someone else with the keys. The rest of the model is about what happens between you deciding to do something and it hitting the chain.

What's between you and a bad transaction

• Keys never leave the device. We don't collect them, so we can't leak them or be made to hand them over. See can Aurus access my funds.
• Unlock. Biometric or passcode to open, automatic lock when you leave it, and viewing your phrase or exporting a key sits behind that same unlock. A stolen phone is a locked phone.
• Every swap is simulated before it's sent. The built transaction runs against the chain first. If it would fail, drain a token you didn't intend to spend, or touch a program that isn't on our allowlist, it doesn't go out.
• You see what you sign. Full address, amount, and fee on screen before anything is signed, in the app and in the browser.
• The browser keeps a blocklist. Known phishing and drainer sites are blocked in the in-app browser, and transactions a site asks you to sign get flagged when they look wrong. You can see every app you've connected and disconnect all of them in one tap.
• The feed filters. Tokens that have already been rugged or drained are removed from discovery before you see them.
• Only the real app talks to us. Our backend checks the device and the install, so a modified copy of Aurus can't use our infrastructure.
• Ledger. If you'd rather the keys weren't on the phone at all, connect one over Bluetooth and sign with it.

What's on you

No wallet protects you from everything, and anyone who says theirs does is selling something. With self-custody, three things are yours to handle. Keep the recovery phrase safe. Be suspicious of anyone asking for it, because nobody from Aurus ever will. And know that a token can be a bad token no matter how good the wallet is. The feed filters out what's already dead; it can't tell you what's about to be. Low caps carry real risk of loss and the app can't change that.

Same team as atlas3, five years on Solana. We've watched enough launches, drainers, and outages to have opinions about what a wallet should refuse to do. Most of the list above came from that.