Security is
Infrastructure.
Financial infrastructure is only as credible as its weakest control. Syrax treats security as a design constraint rather than a hardening step applied late — spanning the chain, the wallet, the exchange, and the payment gateway.
Syrax Sentinel
Syrax Sentinel is the ecosystem's dedicated security layer: an AI-native platform for continuous threat detection, monitoring and response. Its remit spans every surface that holds or moves value — the Syrax Chain, the wallet, the exchange, the payment gateway, the public APIs, and merchant integrations.
Sentinel is a distinct product from the Intelligence Layer. Both apply AI, but to different problems: Intelligence is concerned with operations, analytics and insight; Sentinel is concerned with detecting and responding to threats. They are deliberately kept separate.
Continuous Monitoring
Security events across the ecosystem's services are observed continuously rather than sampled after the fact. The objective is to shorten the distance between an anomaly occurring and it being understood.
Traceable Decisions
Automated systems that act on financial infrastructure must be auditable. Sentinel is designed so that any conclusion it reaches can be reconstructed and reviewed, rather than being an opaque verdict.
Graduated Autonomy
Autonomy is introduced deliberately and in stages. A security system permitted to act on production infrastructure earns that permission incrementally, beginning from observation only.
Development Status
Sentinel is under active development alongside the rest of the ecosystem. Nothing on this page should be read as a claim that it is presently operating in production, or as a warranty of any security outcome.
How the Ecosystem Is Built
These are the principles the platform is engineered against. They describe intent and architecture, not a certification.
Keys Stay With Their Owner
The Syrax wallet is built around hardware-backed passkeys and smart accounts, so the signing key is held by the user's own device rather than transmitted or escrowed. Private keys and recovery phrases are never stored or transmitted by Syrax.
Proof Instead of Disclosure
Zero-knowledge proofs allow a transaction to be validated without exposing the underlying data, which keeps confidentiality and verifiability from being a trade-off.
Defence in Depth
Authentication, authorisation, network boundaries and service-level controls are layered so that no single failure is sufficient on its own. Internal services authenticate to one another rather than trusting the network.
Independent Review
Smart contracts are subject to external audit before mainnet deployment. Self-assessment is not treated as a substitute for independent scrutiny.
Responsible Disclosure
If you believe you have found a security vulnerability in any Syrax service, please report it to security@syrax.global with enough detail to reproduce it. Please do not disclose it publicly until it has been addressed.
We ask that testing does not degrade service for others, does not access or modify data belonging to anyone else, and stops at the point a vulnerability is demonstrated.