Your wallet is a smart account owned by a key created on your device and encrypted with your PIN. Qalibre never sees it. Back it up and you can use your wallet anywhere, without us.
Security
Don’t trust us.Check.
Every protection in Qalibre is enforced by code you can read and contracts you can verify, not by a promise.
Qalibre trades with a separate key that can only settle orders into your own wallet, for tokens you approved, within per-trade and daily limits enforced by the contract. It cannot withdraw. You can revoke it at any time.
Before a trade settles, the settlement contract asks the exchange what a direct swap would pay. If your fill is lower, the whole batch is refused. No server, including ours, can override it.
Tokens are test-bought and test-sold on the live chain without spending anything, and their code is scanned for minting, pausing, blacklists and upgradeability. It runs again at the moment you buy.
Adding a trading venue or raising a fee waits 48 hours and is public on-chain before it applies. Removing a venue or lowering a fee takes effect at once.
Each receipt shows what a direct swap would have paid next to what you got, and both are on-chain. You never have to take our word for the price.
Verified contracts
Read the codethat holds the rules.
Each contract below is verified on the QMS Explorer, so its source matches what runs. The full code and tests are public on GitHub.
- Settlement0x8812…19F4
- Wallet factory0xC443…7154
- Wallet implementation0xa82F…3E20
- Exchange adapter0xDfAf…b414
- Gas sponsor0xd8f6…0f8C
Known limitations
What is not finished yet,said up front.
That is why Qalibre runs on testnet, where tokens have no value. Mainnet waits for an independent audit, published in full.
Governance changes wait 48 hours in public, and the admin key cannot move user funds. It moves to a multisig with hardware keys before mainnet.
Your PIN protects the key stored in your Telegram account. Keep Telegram’s two-step verification on and back up your key. Passkeys are planned.
The floor compares every fill with the pool’s price at settlement. A time-averaged bound is added before mainnet, so one block cannot shift it.
If our server is down, trading pauses. Your funds stay in your wallet, and the recovery page moves them out without us.
Default trading limits are small until the audit is done. You can change them, or turn trading off, at any time.
Report a vulnerability
Found something?Tell us privately.
Email security@qalibre.app or open a private security advisory on GitHub, with the steps to reproduce. Please don’t post it publicly until it is fixed. We reply to every report.