NOXR never needs custody of your wallet

NOXR is non-custodial. It never asks for a seed phrase, private key or wallet recovery phrase, and it never holds your funds. Every scan runs on public Solana data, and any transaction is prepared, simulated and then approved by you inside your own wallet.

No. NOXR cannot move funds on its own. It receives no private key, no session key and no continuing signing authority. Each transaction is a single reviewed action, shown to you with its exact effect and fees before your wallet signs it, and the wallet that signs must be the same wallet that was scanned.

No. Recovery, Dust Cleaner and the Wallet Health Check accept a public Solana address, and Token Risk accepts a public token mint. These scans are read-only and require no wallet connection or signature.

Never. NOXR does not have any field for a seed phrase, private key or recovery phrase. Any site asking for those secrets should be treated as fraudulent.

Only standard Solana instructions for the action you chose, such as closing an empty token account, withdrawing from a fully inactive stake account, revoking a token delegate or swapping dust. NOXR requests no set-authority, no unlimited approval and no hidden instruction.

NOXR shows the exact accounts, instructions and fees before signing, simulates the transaction first, and binds the signed message to the reviewed one. You can also read the instruction list in your wallet prompt and confirm the result afterwards on a Solana explorer.

NOXR never asks for a seed phrase, private key or wallet recovery phrase. Do not enter those secrets into NOXR or any website.

Recovery and Dust Cleaner accept a public Solana address, while Token Risk accepts a public token mint. Wallet connection is not required for those read-only scans.

The Full Wallet Health Check uses only public wallet and token-mint data. It does not connect a wallet, request a signature or create a transaction. Recovery, revocation or cleanup actions remain separate flows with their own review and wallet approval.

Token Risk does not create a transaction or request wallet authority. On-chain mint state is read through server-side Solana RPC calls. Jupiter market data is fetched server-side, so API credentials are not exposed to the browser.

Before recovery, NOXR refreshes current account state rather than trusting stale browser values, builds the recovery transaction server-side and simulates it before the wallet is asked to sign. Stake recovery is limited to fully inactive, unlocked accounts controlled by the scanned wallet; active or deactivating stake is not modified.

NOXR stores a one-way hash of the exact prepared recovery message. Your selected wallet signs that transaction without broadcasting it. NOXR then verifies the signed message still matches the stored hash and verifies the audited wallet signature before broadcasting the exact signed bytes.

A client-reported success is not enough. NOXR verifies the confirmed Solana transaction before marking a recovery complete or recording revenue.

The public scan is read-only. Cleanup is a separate flow that refreshes account state, presents the route and disclosed fees, simulates the transaction, and requires approval in the matching wallet.

The wallet used for recovery must match the scanned wallet. NOXR does not receive a private key, session key or continuing signing authority.

Private RPC, database and Jupiter API credentials stay server-side. Browser-facing code does not receive server RPC API keys or Supabase service-role credentials.

Simulation reduces avoidable failures but does not eliminate network or software risk. Review the wallet prompt and disclosed fees before approving any recovery transaction.