Security and local mode

What stays in your browser

• The compromised private key. It signs the rescue on the page and is cleared when you finish.
• The sponsor wallet's key, stored encrypted on your device.
• Both rescue signatures.

RescueFi's servers never receive a private key and never pay gas on your behalf.

What the servers see

After a rescue lands, the app reports the transaction hash so RescueFi can record what was rescued for its statistics. The server checks the transaction on-chain before recording anything. Token prices are looked up to show USD values.

Local mode

If you would rather not trust a hosted site at all, run the app on your own machine. Set NEXT_PUBLIC_APP_MODE=local in your environment file and start it with pnpm dev. In local mode there is no database and nothing is recorded; the rescue works exactly the same way. The repository's local mode guide has the full setup.

Checking for yourself

The app is open source. Advanced users can watch the browser's network traffic during a rescue: the only outgoing calls are to the blockchain and, after success, the report of the transaction hash.