Security

​

Non-custodial by design

PocketChange never stores, accesses, or transmits your private keys. Your wallet connects through standard adapters (Phantom, MetaMask, WalletConnect). PocketChange reads public on-chain data to display your tokens. No action can occur until you sign a transaction in your wallet. After a transaction completes, PocketChange has zero access to your wallet. No background processes, no persistent connections, no standing permissions. The relationship ends when the transaction confirms.

​

No persistent permissions

PocketChange does not require token approvals to its own contracts. On EVM chains (Ethereum, BSC, Base), all token permissions flow through Uniswap Permit2, a widely audited permission layer used across major DeFi protocols. Permit2 permissions are:

• Scoped to the specific tokens and amounts in your transaction
• Time-limited with an expiration deadline
• Automatically invalid after use

On Solana, transactions are single-use. No approvals are stored. Nothing to revoke.

​

Transaction transparency

Your wallet displays the full details of what will happen:

• Which tokens will be converted or burned
• Where proceeds will be sent
• What fees apply

Nothing is hidden. Nothing executes until you approve.

​

Fee transparency

PocketChange charges a 5% platform fee on successfully converted value. This fee is:

• Calculated and shown in the output summary before you confirm
• Deducted from output automatically
• The only fee PocketChange charges (standard network gas fees are separate)

There are no hidden fees, no subscription costs, and no markup on swap rates.

​

What PocketChange cannot do

This is not a list of promises. These are architectural constraints:

• Cannot move funds without your signature. Every transaction requires explicit wallet approval.
• Cannot access your private keys. Keys never leave your wallet. PocketChange has no mechanism to request, intercept, or store them.
• Cannot initiate transactions on its own. There is no background agent or scheduled process. You trigger every action.
• Cannot retain access after execution. No persistent connections, no stored sessions, no standing permissions.
• Cannot see your seed phrase. PocketChange interacts with your wallet through standard public APIs. Seed phrases are never transmitted.

​

Security contact

Found a vulnerability? Email hello@pocketchange.gg with details. Include steps to reproduce if possible.