Security & Keys

Prospr is pre-launch. The public site and product walkthrough are a demonstration, and the balances, trades, and performance figures shown in them are simulated. This page describes how security and key handling are designed to work on the product being built. Where something is a design commitment rather than a control operating on real customer assets today, it is described that way.

The model in one paragraph

Prospr is being built as a non-custodial interface. You connect a wallet you already control. Prospr does not create that wallet, does not hold or cache your private keys, does not hold a key share, and does not take title to your assets. Orders are intended to execute on a third-party on-chain venue. Where a fiat on-ramp or off-ramp is offered, it is intended to run through a licensed partner. Because Prospr is not the custodian, the security questions that matter here are different from the ones a custodial exchange would answer.

Where things stand today

• No customer assets. Nothing on the public platform holds real funds. Balances in the demonstration are simulated.
• Minimal data. We hold at most an email address for people who sign up. Interface preferences such as theme and view mode stay in your browser.
• Transport security. Production traffic is served over TLS.
• Abuse controls. Public endpoints are rate limited and monitored.

How keys are intended to work at launch

• Your wallet, your keys. Prospr cannot withdraw on your behalf and cannot recover a wallet you lose.
• Withdrawals need your signature. Moving assets off-platform is intended to require a confirmation in your wallet. An already-connected session is not intended to be sufficient on its own.
• Trading permission. So that routine orders do not require a wallet prompt every time, the interface may rely on a trading permission you grant when you connect. Any such permission is scoped to trading activity on the venue, not to moving assets out of your wallet. The exact scope, duration, and revocation path will be shown in the product before you grant it.
• Fiat is a partner path. Identity checks and settlement on a fiat leg are intended to sit with the licensed partner handling that leg. Partners are not named until contracted. A partner's licence is not Prospr's licence.
• No proof of reserves. Reserve proofs exist so a custodian can show it still holds what it says it holds. Prospr is not that custodian, so there is nothing meaningful to attest in that form.
• Company treasury. Movements of Prospr's own funds are designed to require multi-party approval. That control is about company funds, not customer custody.

Independent review

External penetration testing and code review are planned before launch and on a recurring cycle after it. Contracts that handle value are intended to be independently audited before they do so, and audit summaries will be published when they exist. Formal certifications are not held today; we will state which ones we hold, and their scope, only once they are held.

What this model does not protect you from

If you lose your seed phrase, approve a signature you did not intend, or send to the wrong address or network, Prospr cannot reverse it. That is the trade you make when the platform does not hold the keys. Smart contracts, third-party venues, and partner services can also fail. Those risks are set out in the Risk Disclosure.

What we will not claim

We will not describe assets as insured or guaranteed unless a specific, named policy is in force, and we will state its limits when it is. We will not name a wallet, fiat, identity, or venue provider as engaged before it is contracted. We will not describe Prospr as a custodian. Figures without an audit trail are labelled simulated or illustrative.

Reporting a vulnerability

Email security@prospr.cowith reproduction steps. Good-faith research will not be met with legal threats. Please avoid accessing other people's data or degrading the service while testing. A funded disclosure program is planned ahead of launch and is not open today.