Security
Last updated: 18 October 2026
Shingan is two products with one rule: hold as little power over your money as possible. The wallet guard is read-only and non-custodial. The operator platform prepares work and holds projects; it never asks for a platform password, a one-time code, or a key. Here is exactly what that means, and where the limits are.
The core promise
- Non-custodial. We never ask for, receive or store private keys or seed phrases.
- The guard is read-only. It observes public chain data. It cannot sign, send or move anything.
- You sign everything. Any revoke is prepared for you and executed by your own wallet.
- The platform never acts as you. You create the platform account. Shingan prepares the profile, the message and the price; it never receives the platform password.
What Shingan can do
- Read the public addresses you connect and the activity on them.
- Alert you in the dashboard, explain the risk and help you build revocation transactions.
- Store your email and the public wallet addresses you add, the detected events and plan records.
- Prepare a path and its assets, hold your projects, track the steps and account for credits.
- Keep the path and the guard in the same email account; no separate login.
What Shingan cannot do
- Access or move your funds.
- Sign a transaction on your behalf.
- Log into a platform as you or receive your platform password.
- Recover money after a private transfer or a scam, or force a platform to release a payment.
- Recover an email account for you if you lose both the password and the reset link. Contact support.
Threat model
We design against: an attacker who compromises our servers (they should gain no keys, because we hold none); a malicious or compromised dapp you interact with (Shingan surfaces the approval and scores the spender); a drainer that moves funds (Shingan alerts on the outflow); and a scam platform on the earning side (the path carries the fee and code red flags, and the score includes scam risk).
We do not claim to prevent every loss. Monitoring is best-effort and can be delayed or incomplete. The path is preparation, not a guarantee of income. See the Risk Disclosure.
Data & privacy
The guard stores your email and the public wallet addresses you add. The platform stores an email and password hash, your five answers, projects, connections and credit ledger. It never stores keys, platform passwords or card details. You can export or delete from Settings. See the Privacy Policy.
Dependencies
The service relies on external providers: email delivery, blockchain data providers, threat intelligence, an LLM for the path and the evaluation, and a hosting provider. Their outages can interrupt or degrade the service.
Report a vulnerability
If you believe you have found a security issue, please contact us via the bot or support@shinganguard.com before disclosing it publicly. We take reports seriously and will credit responsible disclosure.