Security

Ownership and transfers are enforced by ICP canisters. The browser never holds II seed material. Optional Supabase is a read-optimized mirror only — never spend against mirror balances alone. Service-role keys stay on the Node API host, not the static FE bundle.

Review ledger approvals and max-pay / min-out slippage before confirming market or DAB trades. DEV_AUTH invents a principal without signing — use real Internet Identity for production sends.

If you find a vulnerability, contact hello@dexsta.fun promptly. We aim to address issues responsibly. Significant updates appear in Changelog and Status.