Security
Your wallet stays in control
Research does not have to begin with a wallet connection. When an app does need your address or asks you to act, Hexncoin makes that boundary explicit and your wallet remains the final approval point.
- Private keys held
- NoneKeys stay with your wallet.
- Asset custody
- NoneHexncoin does not hold user funds.
- Transaction approval
- RequiredYour wallet confirms signing actions.
Connection
Research, connect, approve
Those are three different steps. Public-data tools can work without a wallet, connecting exposes a public address, and signing remains a separate action presented by your wallet.
Connection
Public address only
Apps that need wallet context can read the public address you connect and the public on-chain information associated with it.
Approval
Your wallet decides
A transaction or token approval stops at your wallet for confirmation. You can reject the request there.
Custody
Funds stay yours
Hexncoin does not take custody of your assets and does not receive your seed phrase, private key or wallet password.
Permissions
Know what each app can ask for
Hexncoin classifies apps by the widest wallet capability they can reach. Moving up a level adds a capability, but never removes your wallet's confirmation step.
- 00
No wallet access
10 of 23 appsPublic-data and utility apps do not need your connected address. They work without a wallet connection.
- 01
Read your public address
13 of 23 appsThese apps can use the address you connected to show public balances, assets and activity. Reading an address does not move funds.
- 02
Ask for transaction approval
7 of 23 appsThese apps can prepare an action for your wallet. Nothing proceeds unless your wallet presents the request and you approve it.
- 03
Ask for a token allowance
3 of 23 appsSome token trades require an allowance before the trade can proceed. Your wallet presents that approval separately so you can review it.
The rule
Review before you approve
Your wallet’s confirmation screen is the final approval point for signing actions. Check the asset, amount, destination and requested permission before approving.
If a request is unexpected or unclear, reject it. A legitimate Hexncoin workflow does not require you to reveal a seed phrase or private key.
Boundaries
What this security model does not remove
- 01
Hexncoin does not claim an independent security audit.
- 02
External protocols, wallets, networks and market services have risks outside Hexncoin’s control.
- 03
Blockchain transactions can be irreversible. Review the destination, amount and approval before signing.
Contract address and where to buy
HEXN on PumpSwap
HEXN is the Hexncoin community token on Solana, launched on Pump.fun and tradable on PumpSwap. Contract address (CA): xxpump. Always check the CA against the official X account @HexncoinSol before you buy. Verify any purchase or claim link against official Hexncoin announcements. Buy HEXN on PumpSwap
Responsible disclosure
Report a vulnerability
If you find a security issue, send enough detail for us to understand the impact and reproduce the problem safely.
Describe the issue
Include the affected page or feature, expected behavior, actual behavior and clear reproduction steps.
Avoid real user assets
Do not test against another person’s wallet, funds or accounts. Use your own environment and the minimum activity needed to demonstrate the issue.