DeFi Security App#
About the App#
DeFi Security App is a security and monitoring tool for people who are active in
decentralized finance (DeFi). It combines two independent features in a single app:1.
Two-Factor Authentication (2FA) - the primary feature, a standards-based
authenticator for generating one-time login codes.
2.
Wallet & Address Activity Monitoring - a companion feature that lets users
subscribe to public blockchain addresses and stay informed about their on-chain
activity.
phrases, or funds, and it cannot move, sign, or trade anything. Its sole purpose is
to help users protect their accounts (2FA) and stay informed about wallet activity
(monitoring).
Core Features#
1. Two-Factor Authentication (Authenticator)#
The authenticator generates standard time-based one-time passwords (TOTP,
RFC 6238), compatible with any service that supports 2FA.Add accounts by scanning a QR code or entering a setup key manually.
Generate rotating 6-digit codes locally - no network connection is required to
produce a code.
2FA secrets are stored encrypted on the device.
2. Wallet & Address Activity Monitoring#
Users can subscribe to one or more public blockchain addresses and view their
recent activity — transactions, token transfers, DeFi interactions, and related
events.Add addresses to a personal watchlist ("subscribe").
Activity data is aggregated from third-party DeFi analytics platforms and
blockchain explorers through their public APIs.
The feature is informational only — it displays public on-chain data and does
not enable trading, swapping, or any transaction.
Etherscan (and equivalent explorers such as BscScan, Polygonscan, Arbiscan, etc.)
sent to these providers beyond the public address being queried.
Account & Authentication#
Both features require the user to be signed in to a DeFi Security App account.
Authentication is required because:The monitoring feature stores each user's watchlist and subscription/notification
settings server-side so they sync across the user's devices.
It protects the user's configuration and prevents unauthorized changes to the set
of monitored addresses.
account on first launch.
Review / Test Credentials#
To fully test both features, the App Store review team can use the following demo
account:
What the App Does Not Do#
To avoid ambiguity during review:It is not a crypto wallet — no key storage, no custody of funds.
It does not facilitate buying, selling, trading, or exchanging crypto.
It does not provide investment or financial advice.
It only reads and displays public blockchain data and generates local 2FA codes.
Permissions#
Camera — used only to scan QR codes when adding a 2FA account or an address.
Network — used to sync watchlists and fetch on-chain activity from the data
providers listed above.
Notifications (Push) — used to alert users about activity on subscribed
addresses.
Privacy#
A separate Privacy document is available.
In short:
2FA secrets are stored encrypted on-device, only public wallet addresses are
transmitted to data providers, and the app does not sell user data.
Support#
Modified at 2026-08-04 11:50:53
