Wallet connection
Sidoor connects to wallets through the browser wallet provider. Connecting a wallet or signing a login message does not give Sidoor a recovery phrase, wallet password, or private key.
Bridge transactions
Bridge transactions are signed in the user wallet. The bridge flow includes a clearly disclosed 1% Sidoor service fee, a USDC approval, and the Circle CCTP burn. The Arc recipient is the user's connected address.
Custodial terminal wallet
The terminal can create a Sidoor Arc wallet for trading. Its encrypted key is stored server-side. Withdraw and private-key export require a fresh signature from the user's login wallet over an action-specific nonce. Sidoor support will never ask users to paste or send a private key.
Report an issue
Report security issues through x.com/Sidoorxyz. Include the affected URL, steps to reproduce, and whether funds or private data could be affected.