Skip to main content

Wallet Security Models (Hot, Warm, Cold)

Finrock supports three wallet configurations distinguished by where the third MPC key share resides and how approvals happen:

Hot Wallet

Key shares are hosted on the cloud using Finrock-KMS (aka Cloud Signer); approvals can be fully automated for high-throughput workflows.

Warm Wallet

Key shares are hosted on internet-connected mobile devices; approvals are done via the Finrock mobile app.

Cold Wallet

Key shares are hosted on an air-gapped (offline) mobile device; approvals require bi-directional QR scanning for maximum isolation.

Role-Based Access Control (RBAC)

Finrock enforces granular permissions by role, controlling:
  • Which parts of the console/API a user can access
  • Which actions they can perform (e.g., initiate transfers, change policies)
  • Which MPC key shares they can use to sign
Roles range from Owner (full admin) down to Viewer (read-only). API users can be assigned any role except Owner.

Admin Quorum

Sensitive workspace changes (adding/removing users, whitelisting addresses, new network connections, policy edits) require multiple admin approvals defined by an Admin Quorum threshold. This multi-party approval mitigates insider risk and limits damage if an admin account is compromised.

Policies (Transaction Authorization)

Policies define rules and limits for transactions in your workspace, including:
  • Who can move funds
  • How much can be sent per transaction or time window
  • Required approvals and authorization flows
  • Smart-contract-specific controls (deploy, upgrade, pause, etc.)
Additionally, the rules engine includes multi-asset rules, simplified configuration, and direct AML/KYT integration.

Compliance: AML/KYT Screening

Built-in transaction screening enables real-time AML/CFT monitoring, sanctions checks, and behavior analysis via integrations such as Chainalysis, CipherTrace, and AMLBot.