VEYRNOX - Showcase Project

I built VEYRNOX because in 2024 I started reading Chainalysis and TRM Labs reports every quarter and got tired of watching the same failure mode play out. A crypto holder loses their seed phrase to a phishing site, or someone walks up to them with a wrench and asks them to unlock the wallet. Every mainstream self-custody wallet — MetaMask, Trust, Ledger Live, Phantom, Coinbase Wallet — is designed for the first attacker (remote, digital, wants your seed). None is designed for the second (physical, present, wants you to unlock). Veyrnox ships for both. The wallet is seedless — no 12-word BIP-39 phrase in the UI. Keys are generated and used inside the phone's Secure Enclave (iOS) or StrongBox (Android) and never leave the chip. Recovery uses Shamir SLIP-39 sharding across device + your own cloud + optional paper; we hold zero shards. If Veyrnox LTD is dissolved tomorrow, users still hold and sign with their keys — no vendor as a required counterparty (which is the trade MPC wallets make and we deliberately didn't). For the physical-attack side, Safety Plus ($5.99/mo) adds duress PIN, decoy wallet with real on-chain history, and panic wipe. The decoy is indistinguishable from a real wallet under scrutiny — it has its own address, its own transactions, a small live balance. Two PINs, both valid. The wallet doesn't signal which one unlocked it. For the on-chain attack side, AI Security Protection ($19.99/mo) adds real-time transaction risk scoring, address-poisoning flagging, drainer-contract detection, and phishing-dApp checks at the wallet layer. Live on iOS and Android. UK-registered (Companies House 17299951). Third-party Strix pentest complete August 2026 — 14 findings across 200k LOC, all remediated, security score 100.0/100. Full redacted report is public at veyrnox.com/audit-strix-report. Independent manual audit queued Q4 2026. Free tier is real — full self-custody, full multi-chain (BTC + ETH + SOL + USDC + USDT + more), Shamir sharding, WalletConnect v2. Paid tiers are opt-in for users who want the coercion or AI layers on top. Happy to answer questions on architecture, threat model, or why we chose Shamir over MPC. All the deep dives — /coercion-resistance, /mpc-wallet, /slip-39, /audit-strix-report — are on the site.