NOXR never needs custody of your wallet
The recovery flow is designed so discovery happens from public data and authorization stays inside the user's wallet.
No wallet secrets
NOXR never asks for a seed phrase, private key or recovery phrase. Do not enter those secrets into NOXR or any website.
Audit before connection
The initial recovery audit accepts only a public Solana address. A wallet connection is not required to discover supported reclaimable SOL.
Server-side validation
Before execution, NOXR refreshes the account state server-side rather than trusting stale browser data. Transaction instructions are constructed from that refreshed state and simulated before the browser receives the unsigned transaction.
User-controlled signing
The wallet connected for execution must match the audited address. The user reviews and signs the transaction in Phantom. NOXR does not receive signing authority, a session key or continuing access after the transaction.
Confirmation
A submitted transaction is not counted as a successful recovery merely because a wallet returned a signature. NOXR verifies the transaction on Solana and records a confirmed recovery only after the chain reports success.
Infrastructure secrets
Private RPC and server credentials are used only on the server. Browser-facing code must not receive server RPC API keys or Supabase service-role credentials.
Transaction review still matters
Simulation reduces avoidable errors but is not a guarantee of execution or asset safety. Always review the wallet prompt, destination addresses and fee amount before approving any on-chain transaction.