×Questions
Answered plainly.
Who holds the key, what the seven checks are, what happens if you lose a phone, and what can still go wrong.
Keys and custody
Who holds my funds?
Your SOL and USDC sit in your own vault address on Solana, one vault per account. Auro's servers hold that vault's signing key and only use it after all seven checks pass on your trusted phone.
So is this self-custody?
Not fully. You hold the passwords, the PIN, the trusted phone and the 24 words. We hold the vault key, so you trust Auro to follow the rules. A hardware wallet keeps the key away from any server.
Why no smart contract?
Deploying one costs fees that would land on you. The rules run on Auro's servers instead, and every move is on-chain for anyone to check.
What are the 24 words for?
They never spend anything. They only start a 72-hour countdown to make a new phone your trusted phone.
Will it move to a smart contract?
We plan to, so the rules stop depending on our servers. That is a plan, not a promise. It would be announced before anything changes for you.
Sending and the seven checks
What are the seven checks?
Start, Face ID, PIN, a plain-words read of what will happen, your trusted phone, a final review of the address and amount, and your password. All seven, in order, for every send.
Can I change the address after I approve?
No. Each check is tied to one fingerprint of the send. Change the address or amount and the earlier checks no longer match, so the send stops.
What if I type the wrong PIN?
You get 5 tries. After that the PIN is frozen for 15 minutes. The password works the same way.
What does a waiting send mean?
If you set a wait for new addresses or for large sends, the send sits as Waiting with a countdown. You can cancel it until it releases.
Can I set limits?
Yes. A daily limit, a wait for new addresses and a wait for large sends, all off until you turn them on. Tighter limits apply at once. Looser ones wait 24 hours, so a thief cannot loosen them.
Phones and recovery
What is a trusted phone?
The one phone that can approve sends. It holds a device key that never leaves its browser storage, plus your Face ID passkey. There is one trusted phone per vault.
What does a new phone see?
A read-only safe. Signing in with your password on a new device lets you look, not send, until your trusted phone approves it.
I lost my phone. What now?
Use the 24 words to start a replacement. It waits 72 hours. Your old phone is told right away and can cancel at any time.
What if I lose my phone and my 24 words?
Then the app can't recover your safe. Write the words down and keep them away from your phone.
What does the emergency lock do?
It stops every outgoing send at once and cancels any that are waiting. Unlocking needs your trusted phone, your PIN and your password, and takes effect after 1 hour.
Fees and tokens
What can I hold?
SOL and USDC. Nothing else yet.
What does a send cost?
Solana's network fee, usually a fraction of a cent. A first USDC send to a new address also pays a small one-time account deposit. The vault pays both.
How do I put money in?
Open Receive, copy your vault address and send SOL or USDC to it from anywhere.
Trust and risks
Has Auro been audited?
No. There is no third-party audit yet. Mainnet comes after one.
Is this real money?
Not yet. Auro runs on Solana devnet only, with test coins.
Where can I use it?
In a web app, for now. Phone apps may come later.
What can still go wrong?
A phone that is already hacked can approve what you tap. Someone can talk you into a send. Our own code can have bugs. And if you lose your phone and your words, nobody can help.
