privy

embeddedwallets

1/ Defense in depth: transaction policies

Even in the event of an infrastructure takeover, policies can keep your funds safe.

We believe that robust security comes in layers that can be resilient against many flavors and angles of attack.

Here’s our latest thinking at @privy 👇 

https://privy.io/blog/policy-engine

Defense in depth means working in security at every layer: team, arch, infra, transaction engine, interfaces

Policies let you mng what a wallet can do and who can do it, from allowlisting contracts and recipients to tx limits and time-based session keys.

Colfax breaks it down.