SA Smart Account
NERVOS CKB · LIVE ON PUDGE TESTNET · UNAUDITED PREVIEW

A wallet that
can't be stolen.

Self-custodial CKB, secured by the passkey already on your device, and designed so there is nothing to steal: no seed phrase, and keys that never leave your secure enclave. On-chain social recovery if your phone goes in the sea, all enforced by the chain, not us. It is a free practice version on the testnet right now: test coins, not real money, so you cannot lose anything while you try it.

Passkey · this device
TOTAL BALANCE
12,840 CKB
Illustration · real on-chain proofs below
LIVE on Pudge testnet
Passkey verified ON-CHAIN
Keys stay in the secure enclave
No seed phrase, ever
Testnet only, no real funds yet, and not independently audited, so treat this as a preview. A relayer funds your first account and a public node reads balances, so they can see your address, but neither can ever move your funds. We will tell you the moment that changes.
What makes it different

Custody that feels like nothing,
and protects like everything.

Most passkey wallets give you one key and a recovery they host. Smart Account gives you M-of-N keys, per-transaction spend caps, and social recovery the chain itself enforces, not us.

Face ID is your signature.

Sign with the biometrics you already use. The private key is generated and stored inside your device's secure enclave and never leaves it, and the smart-account lock verifies the WebAuthn assertion on-chain. There is no seed phrase to write down, phish, or lose.

WEBAUTHN → P-256 ASSERTION VERIFIED IN CKB-VM

Lose the phone, keep the funds.

Add trusted guardians first, then if you lose your device they can move your account to a new one behind a timelock you set, with a one-tap veto if it wasn't you.

PROPOSE → TIMELOCK → FINALIZE, ON-CHAIN

Two keys, one transaction.

Require M-of-N approvals across your own devices or trusted people, coordinated with a shareable signing request.

FIXED-SLOT INTENT · DETERMINISTIC SIGHASH
0%

Yield without leaving home.

Native Nervos DAO staking at a variable, protocol-set rate (recently around 2 to 4% a year). Your CKB never leaves your account to earn it.

DAO DEPOSIT = A SPEND YOUR ACCOUNT SIGNS

Don't trust the server. Verify the chain.

Flip on an in-browser light client that proves your balance from the chain itself, not from a trusted RPC's word.

WASM LIGHT CLIENT · BALANCE FROM PROOFS
How custody works

No seed phrase. No custodian.
No trust in our servers.

Most wallets ask you to trust a seed phrase and hope you never lose it. Smart Account replaces that with hardware you already carry and rules the chain enforces.

01

You tap.

A biometric prompt appears. The key signs the transaction entirely inside your device's secure enclave.

02

The chain checks.

The signature is verified on-chain by your smart-account lock running in CKB-VM, not by us. We cannot move your funds.

03

It moves.

The transaction settles. No seed phrase was ever created, no custodian held your keys, no server was trusted.

Recovery, in your control

What if I lose everything?

Recovery is a state machine, not a support ticket. Your guardians propose a move to your new device. A timelock you chose starts ticking. If it wasn't you, one tap vetoes it. Nobody, not even your guardians, can rush past the clock.

PROPOSE
M guardians sign
PENDING
timelock counting
FINALIZE
new device active
owner veto, any time → CANCEL
Guardians can be your other devices, trusted people, or both. They never see your funds, only the power to help you move.
Verifiable on-chain

Every claim on this page
is a transaction you can look up.

Custom smart-account lock on ckb-auth. WebAuthn unwrapped and P-256 verified inside CKB-VM. A stable address across key rotation via a TYPE_ID config cell. The hard parts are on-chain and testable.

NETWORKNervos CKB · Pudge
LOCKcustom smart-account on ckb-auth
PROOFSpublic on the Pudge explorer
STATUSlive on testnet
Developer guide View on the Pudge explorer
smart-account · pudge
bootstrap 0x21980b71…f26c // WebAuthn account created (algo 0xFE)
spend 0x399b368f…8aea // authorized by a WebAuthn assertion, verified on-chain
recovery 0x3e4f4338…5ac9 // guardian rotation finalized (example account)
$  
"Everything a wallet should be, and nothing it shouldn't. Sign with your face. Recover through people you trust. The chain enforces every rule, so moving funds always takes your passkey, never us and never a server."

Live right now on the Pudge testnet, free to try. Bring test CKB, push it as hard as you can, and see for yourself. Mainnet the day it is bulletproof.

Real custody. Real recovery.
Live today.

Smart Account is running on the Pudge testnet right now. No seed phrase. Your keys, your face, your guardians.

Not ready to try testnet? We will email you the day mainnet is ready, and nothing else.
SASmart Account ·Pudge explorer ·built on Nervos CKB ·LIVE ON PUDGE, testnet only