Security

Molthood is a read-only analysis platform. It reads public chain state and public web pages. It has no custody, signs nothing, and submits no transactions.

It never touches your wallet

There is no wallet connection anywhere in the product. Analysing an address requires only the address, which is public information. Nothing asks you to sign a message, approve a transaction, or connect anything.

Credentials

Stored as hashes

An API key is shown once at creation and stored hashed. It cannot be recovered — a lost key is replaced, not retrieved.

Never sent to the browser

Provider credentials live server-side only. No key that costs money is ever included in code served to a visitor.

Revocable independently

Revoking one key leaves every other key working.

Isolation

Analysis that requires executing code runs in an isolated sandbox with no access to platform credentials or other users' data. Outbound requests are validated before they are made, so a supplied URL cannot be used to reach a private network address.

Reporting an issue

If you find a security problem, please report it privately rather than opening a public issue, and give us a chance to fix it before disclosure.