Security is a boundary, not a promise
Smartable is designed to keep recovery material, signing authority and final transaction approval under your control. It can reduce common risks, but no wallet can make an unsafe device, a compromised recovery phrase or a bad decision risk‑free.
Your keys stay local
How the risk usually starts
Many losses do not break cryptography. They start when a recovery phrase, private key or signing credential is exposed, copied or stored somewhere it does not belong.
What Smartable does
Smartable is non-custodial. It does not create a custody account or hold your crypto-assets for you.
Your recovery phrase and signing authority remain under your control. Smartable uses device security features to protect wallet access and can use password, PIN and biometric unlock options where supported by your device.
Before relying on any wallet, back up your recovery phrase securely and keep it offline.
Device limits
Security depends on the device and operating system you use.
On supported Android devices, Smartable can protect sensitive screens from screenshots and screen recording. iOS does not provide an equivalent control, so Smartable cannot block screenshots or screen recording there.
No device check can prove that a phone is safe. A compromised device, malicious app or exposed recovery phrase can still put your wallet at risk.
Recipients and transaction review
How the risk usually starts
A copied address, lookalike address, phishing message or misleading transaction request can send funds somewhere you did not intend.
What Smartable does
Smartable shows the recipient, asset, network, amount and applicable fees for your review before you sign. Check these details carefully every time.
Use saved recipients only when you recognise and trust them. Never rely only on the first and last characters of an address, and do not send funds because an address appeared in your transaction history.
Tokens and contracts
How the risk usually starts
Anyone can create a token with a familiar name or ticker. Spam airdrops and copycat contracts can appear in a wallet without your permission.
What Smartable does
Token names and tickers do not prove identity. On supported EVM networks, Smartable identifies manually added tokens by contract address.
Only add or interact with a contract address from a source you trust. A token shown in a wallet, a token name or a familiar ticker is not proof that the asset, issuer or price is legitimate.
Approvals and signing
How the risk usually starts
A token approval can give a smart contract permission to move assets from your wallet. A signature can also authorise actions you did not intend if you do not understand what you are approving.
What Smartable does
Smartable presents transaction and approval details for review before signing. Do not approve an allowance, transaction or message unless you understand the asset, network, amount, recipient or spender involved.
Where an approval can be revoked, Smartable provides a way to review and revoke existing token approvals. Revoking an approval removes a permission; it does not reverse transactions that have already been completed.
AI analysis and Agent Wallet
How the risk usually starts
An AI can be wrong or misled by what it reads, and a public address you share with an AI service links that address's on-chain history to your account there.
What Smartable does
No AI connects to Smartable or to any wallet in it. It cannot read your wallet, sign, send or ask the app for a transaction.
To have an AI service analyse an account, Smartable prepares a text with the public addresses, networks and analysis task you choose. It contains no balances, wallet names, recovery material or signing credentials. Review it before you share it, and treat the answer as the service's own reading of public data — it can be wrong.
An Agent Wallet is a separate wallet with its own recovery phrase, for funds you choose to move into it. No AI tool connects to it or controls it.
What we do not claim
No independent third-party security audit yet.
Automated tests and reviewable core wallet code can improve confidence and help catch regressions, but neither replaces an independent security audit. When an audit is complete, Smartable will publish the report.
No insurance.
Smartable does not provide insurance or a recovery fund. If assets are lost or stolen, Smartable cannot reverse a blockchain transaction or guarantee a payout.
No recovery without your backup.
If you lose your recovery phrase and every backup or recovery share, Smartable cannot restore access to your wallet. Never share your recovery phrase, private key, password, device PIN or recovery shares with anyone.
Security reports
If you believe you have found a security vulnerability in Smartable, use the contact address published in the Privacy Policy.
Do not include a recovery phrase, private key, password, device PIN or live access credential in a report.
One rule
Smartable will never ask for your recovery phrase, private key, password, device PIN or recovery shares. Smartable will never ask you to sign a transaction to “verify”, “unlock” or “recover” your wallet.
Anyone who asks for these is not Smartable, regardless of the name, address, avatar or logo they use.
Get started