Security: trust model

Rempart compares cross-chain swap routes. Here is precisely what we do, what we do not do, and how to verify it.

Non-custodial by design

You sign every transaction from your own wallet, directly to the executing protocols' smart contracts (LI.FI, Relay…). Rempart never holds, relays or routes funds: there is no account, no deposit address, no intermediary contract deployed by us. No private key or seed phrase ever touches our servers. If any interface asks for them in Rempart's name, it is a scam.

What we cannot do with your funds

  • Move, freeze or seize your funds: we never have control over them.
  • Sign a transaction for you: only your key, in your wallet, can sign.
  • Alter a transaction once you have signed it.
  • Recover your funds if you lose your seed phrase: we do not know it.
  • Cancel or refund a swap executed by a third-party protocol.

The contracts called

Every transaction offered for signature is checked against an allowlist of known contract addresses, maintained per provider and verified against their official documentation. If a provider's API returns an address outside that list, the transaction is blocked before it is ever offered to you.

LI.FI Diamond

0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE

Identical on seven EVM chains (Ethereum, Arbitrum, Base, Optimism, Polygon, BNB Chain, Avalanche), source github.com/lifinance/contracts. On Robinhood Chain, LI.FI uses a chain-specific entry contract, verified against its live deployment and the LI.FI chains API.

Socket AllowanceHolder (Bungee routes)

0x50c4E75a512F2A14A7b304787Adf79C4531A5909

Receives the ERC-20 approval and the swap transaction. Identical on every supported chain. Source: docs.socket.tech/integrate/contract-addresses.

Socket OpenRouter (Bungee routes)

0x50cFe7c1938dB66A1a6D2e86D36F39FBef3d5c4a

Router called by the AllowanceHolder. Identical on every supported chain. Source: docs.socket.tech/integrate/contract-addresses.

Before every signature

  • The quote is re-fetched right before execution to reflect the current price.
  • The destination contract address, the exact amount and the chain are shown, never a "blind" signature.
  • ERC-20 approvals cover the exact swap amount by default, not an unlimited amount.

Solana execution

Before you sign a Solana swap, Rempart inspects the transaction the provider built: it must require exactly one signature (yours), its fee payer must be your wallet, and every program it calls must be on Rempart's allowlist for that provider. A transaction that hides a program behind a lookup table, or calls anything unknown, is refused before signature. We never build the transaction ourselves and never relay your funds.

Your data

No account, no tracking cookies. Your swap history is stored only in your browser's localStorage, and you can clear it at any time. Calls to provider APIs go through our server without transmitting personal data beyond the public addresses required for the swap.

One official domain only

Rempart's only official domain will be rempart.app. Clones of swap sites are the sector's number one scam vector: check the URL before connecting your wallet, and trust no other domain.