Security & Trust Checklist
Security claims should be verified against current official sources, including audit scope and dates, contract addresses and incident disclosures. No DeFi protocol is risk-free.
Verify audits and scope
Read the actual audit report, identify the contract version and scope, and check whether findings were acknowledged, fixed or left unresolved. A badge or claim that a protocol was audited is not enough on its own.
Wallet and domain hygiene
Bookmark the verified official domain, check it before connecting, inspect wallet prompts and never share seed phrases or private keys. Be suspicious of direct messages, fake support accounts and promises of guaranteed airdrops or staking returns.
On-chain verification
Use official contract addresses and trusted explorers to inspect token contracts, vault holdings and relevant transactions. Token names and logos can be copied by malicious projects.
Operational controls are not guarantees
Multisig, timelocks, monitoring and pause procedures can help manage certain incidents, but they do not remove all smart-contract, governance, counterparty or operational risks.
Frequently asked questions
Does an audit mean there is no risk?
No. Audit scope is limited and new vulnerabilities can emerge.
Should support ever ask for a seed phrase?
No. Never share a seed phrase or private key.
Where should audit details be checked?
Use the official NUVA security documentation and the original audit reports.
Related NUVA guides
Important: This is an independent informational companion site, not the official NUVA application. It does not provide live quotes or execute transactions. Product terms, rates, availability and eligibility can change. Verify all current details in official NUVA materials before taking action; digital-asset and vault products involve risk, including possible loss of principal.