Security Model

What stays on your device

Your seed phrase and private keys are generated and stored locally, encrypted with your password. They are never transmitted to any server. There is no cloud recovery.

What the gateway can and cannot see

The Morana Lightd gateway serves compact, public block data. It cannot decrypt your shielded notes. For transparent addresses, the gateway necessarily learns which addresses your wallet queries — run your own lightd + node for maximum privacy.

Backups

The .morbak backup is encrypted and bound (AAD) to your network and app version. A backup from a different network is rejected on restore. Keep the backup and its password separate.

Honesty policy

We do not claim "guaranteed anonymity." Morana is a public testnet and has not been independently audited. Shielded transactions improve privacy but are not a magic cloak — metadata, usage patterns, and transparent interactions can leak information.

Responsible disclosure

Found a vulnerability? Report it privately through the channels on the contact page before disclosing publicly. Please give maintainers reasonable time to respond.

Before mainnet

A security audit and an audited key ceremony are prerequisites for mainnet. We will not call the network "mainnet-ready" until those are complete.