The risks.

Auro makes moving money harder for an attacker. It is not a claim of absolute security. These risks remain.

A compromised device

If malware controls your phone while it is unlocked and trusted, it can see what you see and may be able to push you through the checks. Keep your phone updated and install only apps you trust.

Social engineering

Auro cannot tell a real request from one you were talked into. If someone pressures you to send, stop and read the plain summary again. Nobody from Auro will ask for your PIN, password or 24 words.

Bugs

Our code can have mistakes, in the app, the servers or the libraries we use. Start with amounts you can afford to lose until the product has a track record.

Signer loss

If you lose your trusted phone and your 24 words, the app cannot recover your safe. Write the words down and keep them away from your phone.

Custody

Auro's servers hold each vault's signing key and enforce the rules. If our servers or our key material were breached, or if Auro acted dishonestly, funds could be at risk. This is the cost of not using a smart contract today. See how Auro really works.

Network

Auro runs on Solana. Network congestion, outages or changes can delay or fail a send. Transactions on Solana cannot be reversed once confirmed.