embeddedwallets

1/ Defense in depth: transaction policies

Even in the event of an infrastructure takeover, policies can keep your funds safe.

We believe that robust security comes in layers that can be resilient against many flavors and angles of attack.

Here’s our latest thinking at @privy 👇

The easiest way to bring all your users onchain, regardless of whether they already have wallets | Customer love at privy.io/love

1/ Defense in depth: transaction policies

Even in the event of an infrastructure takeover, policies can keep your funds safe.

We believe that robust security comes in layers that can be resilient against many flavors and angles of attack.

Here’s our latest thinking at @privy 👇 

https://privy.io/blog/policy-engine

3/ Even if the infrastructure initiating authorized signatures is compromised, a smart policy foundation can still prevent hacks.

Further, policies can only be updated by a quorum of designated owners, ensuring the compromising party cannot simply remove policies at will.

4/ Head to our docs to get started with transaction policies and let us know what you think!  Your feedback drives our roadmap.

2/ Most hacks are the result of a compromised wallet taking an action that it doesn’t normally perform.  Simply, with policies, if a transaction doesn’t match what you expect, even if it comes from your infrastructure, it won’t go through.  Some examples are:

🔺 Max transaction value

🚦 Allowlist to certain addresses

❌ Restrict smart contract parameter values

💻 Prevent use of 'delegatecall'

They can also be stacked together