Security
How the interface is built to keep control with the user, and what it depends on.
Wallets
Wallets connect through the Solana Wallet Standard (for example Phantom, Solflare or Backpack). RwaMarkets reads the connected public address and requests signatures; it cannot move funds on its own.
Signing
- Every transaction requires explicit approval in the user's wallet. RwaMarkets never signs automatically.
- The transaction presented for signature is the one assembled by the execution provider, unmodified by RwaMarkets.
- After signing, the signed transaction passes through RwaMarkets' server to the execution provider. A signed transaction cannot be altered without invalidating the signature.
- Repeated button presses cannot submit the same trade twice.
Transaction review
Users should check the details in their wallet before approving — in particular the tokens and amounts the wallet's simulation shows — and compare the asset's mint with the official mint in the Contract Registry.
Smart contract exposure
RwaMarkets does not deploy or operate smart contracts. A trade interacts with:
- the aggregator program and the liquidity-venue or RFQ programs selected for the route
- the SPL Token or Token-2022 program
- the issuer's token mint, including any Token-2022 extensions the issuer has enabled
Infrastructure
| Dependency | Role |
|---|---|
| Solana | Settlement of all transactions |
| Execution provider | Quotes, routing, transaction assembly and landing; price and token data |
| Helius | Solana RPC and real-time price data |
| Vercel | Hosting of the application and its server routes |
| Token issuers | The tokenized products and their onchain controls |
| Wallet providers | Key management and transaction signing |
API credentials
Credentials for third-party providers are held as server-side environment variables. They are used only by server routes and are not included in any code sent to the browser.
What the server sees
To show balances and build quotes, RwaMarkets' server receives the connected wallet's public address and trade parameters, and forwards them to its RPC, pricing and execution providers. It does not store balances or maintain user accounts. See Privacy.