Wallet and signing
Your wallet
Your BlockFinaX wallet is a smart-contract account on Stellar. Its signer is your passkey, and nothing else. It is created when you create your passkey, together with deposit accounts on supported EVM networks.
| Who holds it | |
|---|---|
| Your passkey's private key | Your device, password manager or security key. It never leaves it. |
| Your passkey's public key | Your wallet, and BlockFinaX, to check your approvals |
| Your funds | Your wallet and, while they back or buy protection, the pool contract |
BlockFinaX cannot sign for you. It has no copy of your key.
Business accounts
A business account is a separate account on Stellar that belongs to your business. Your same passkey approves for it, but only within your role there, and you choose in the app whether you are acting for yourself or for the business. See Business accounts.
Approving a transaction
Every action that moves money or changes a position asks for your passkey:
- The app prepares the transaction and shows what it does.
- Your device asks you to confirm with your fingerprint, face or PIN.
- Your passkey signs an approval for that one action.
- The transaction is submitted with its network fee covered.
Fee sponsorship
Network fees are covered, so you never need XLM or ETH. Relayers submit your approved transaction and pay the fee.
| Network | Relayer |
|---|---|
| Stellar | OpenZeppelin Relayer Channels, with a BlockFinaX fee account as the fallback |
| Base | Coinbase's paymaster, with Pimlico's paymaster as automatic backup |
Relayers only pay for a fixed list of actions: USDC transfers and approvals, Circle's transfer contracts, and BlockFinaX contracts. They check that your passkey approved each one before submitting it, and they cannot change what you approved.
Deposits need no approval
USDC you send to your Base deposit address is moved to your Stellar account without any approval from you. That is safe because the deposit address can only ever send your USDC to your own Stellar wallet. See Fund your wallet.
Actions that need your approval
Buying protection, receiving a payout, adding or withdrawing liquidity, setting backing preferences, creating or changing a pool, sending USDC, and adding a backup passkey.