Is Shieldz safe?

Q: Will Shieldz ever ask for my seed phrase or private key?

Never. Shieldz only ever holds a public key, address, or view-only key. If any site asks for your seed phrase or private key, close the tab.

Short version: Shieldz is non-custodial. It never holds your money, never asks you to connect a wallet or approve a token allowance, and cannot move or freeze your funds. Here's exactly why, and how to verify it yourself.

Open and independently verifiable

The SDK is open source and shipped with verifiable supply-chain guarantees:

The Node SDK has zero runtime dependencies and is published with npm provenance (a Sigstore attestation linking the exact source commit and build). Each GitHub release ships a CycloneDX SBOM, SHA-256 checksums, and a cosign signature, and the source is permanently archived on Software Heritage.

No wallet connection. No approvals. No drainer.

Crypto "wallet drainers" steal funds by getting you to connect a wallet and approve a token allowance, an "unlimited allowance" that then lets a contract spend your balance. Shieldz never does this. Buyers pay by sending crypto to a one-time address, or scanning a QR, exactly like any normal transfer. There is no smart contract to approve and no allowance to grant, so the one mechanism drainers depend on simply isn't there.

If you sign in to the dashboard with a wallet, that's a plain message signature proving you own the address (Sign-In with Ethereum). A message signature moves no funds and grants no spending access.

And Shieldz never asks for, receives, or stores your private key, seed phrase, or mnemonic, a non-custodial tool never needs them, and there's no field for one. It only ever holds a public key (your address, an xpub, or a view-only key), which can generate your receive addresses but mathematically cannot spend. If any site ever asks you for your seed phrase or private key, close the tab, we never will. See the cryptographic proof →

Shieldz never holds your money

You give a receive address (or an extended public key); Shieldz derives a payment address that belongs to you, watches the chain, and notifies you when funds land. There's no Shieldz balance, no pooled funds, and no private key on our side, so there's nothing for us to freeze, lose in a hack, or run off with.

Two settlement paths, and being precise about both

Direct settlement (the buyer pays the same token you receive) is a pure wallet-to-wallet transfer: only the two wallets are involved, and Shieldz just observes it. This is the most strictly non-custodial path, and it is the default.

Pay-any-coin (swap-settle) is an optional convenience: a buyer can pay in a different coin, and the conversion is performed by independent, non-custodial swap protocols (NEAR, Chainflip, Relay), with the settled token delivered straight to your own wallet. This is not a simple two-wallet transfer, it relies on those third-party protocols for the conversion leg, so the trust surface is slightly larger. What does not change: Shieldz holds no balance and no keys at any step, and takes no fee on the swap. If you want the purest model, accept the same coin you settle in.

Verify it yourself

The receiving address is shown on the checkout. With a single settlement address, every invoice pays exactly the address you set, check it.
Payments happen on public blockchains: any payment is verifiable on a block explorer, and a confirmed payment is final and already in your wallet.
There's no "withdrawal" step and therefore no withdrawal trap. The classic scam, "pay a network/activation fee to release your balance", is impossible here, because Shieldz holds no balance to release.

Who's behind it

Shieldz is built by Deniz Yanbollu (@dnzynbl) and the team behind LeoKit, the open-source cross-chain routing aggregator that also powers LeoDex. Reach us in the open on X, Telegram, or at [email protected]. Our security contact (RFC 9116) is published at security.txt.

Frequently asked questions

Is Shieldz safe? Yes. Shieldz is non-custodial: it never holds your money, never asks you to connect a wallet or approve a token allowance, and cannot move or freeze your funds. The only mechanism drainers rely on, a token approval, does not exist in the payment flow.

Can Shieldz drain my wallet? No. You never connect a wallet or grant a token allowance to receive a payment; buyers simply send crypto to an address. With no approval to exploit, there is nothing for a drainer to abuse.

Does Shieldz hold my funds? No. There is no Shieldz balance and no pooled funds. Payments settle directly to a wallet you control, so there is nothing for Shieldz to freeze, lose in a hack, or run off with.

Will Shieldz ever ask for my seed phrase or private key? Never. It only ever holds a public key, address, or view-only key. If any site asks for your seed phrase or private key, close the tab.

No KYC, $0 fees, no lock-in

No KYC to start, $0 platform fees, and your funds are never held, see how it stays free, why there's no KYC, and how it works.