Security
We believe security comes from transparency. Here's exactly how ZenithScores handles your connection, transactions, and data.
Non-Custodial by Design
ZenithScores is an interface, not a custodian. We never have access to your private keys, seed phrases, or funds. Your wallet connects locally in your browser—we're just a window to the blockchain.
What We Cannot Access
Private Keys
Your keys stay in your wallet (Phantom, Solflare). We never see them.
Seed Phrases
We don't ask for, store, or transmit seed phrases. Ever.
Fund Movement
We can't move your tokens. Only you can sign transactions.
Transaction Reversal
We can't undo or modify transactions. Blockchain is final.
How Transactions Work
You Request a Quote
We ask Jupiter for a price quote. This is read-only—no wallet interaction yet.
Jupiter Builds the Transaction
Jupiter's API constructs the swap transaction with optimal routing. The transaction is unsigned at this point.
You Review in Your Wallet
Phantom opens showing exactly what will happen. You see the tokens, amounts, and fees. You must explicitly approve.
Direct to Blockchain
Your signed transaction goes directly to Solana. Verifiable on any explorer.
Our Security Practices
✓HTTPS Only
All connections encrypted. No mixed content.
✓Wallet Adapter Standard
Official Solana wallet integration—trusted by Jupiter, Raydium, Drift.
✓No Backend Wallets
We don't have server-side wallets or hot wallets.
✓Open Source Protocols
Built on Jupiter API and Solana RPC—publicly auditable.
✓No Auto-Signing
Every transaction requires your manual approval.
✓Minimal Permissions
We only request wallet connection—never private key access.
Your Responsibility
Non-custodial means you're in control—and responsible. If you lose your seed phrase or send tokens to the wrong address, we cannot help recover them.
- Never share your seed phrase with anyone—including us.
- Always verify transaction details in your wallet before signing.
- Use a hardware wallet for large amounts.
Report a Security Issue
Found a vulnerability? We take security seriously. Contact us at:
Please include detailed steps to reproduce the issue.
Security is a process, not a destination. We continuously review and improve our practices.