Security
The principles that keep a Guardian Rescue session safe by default.
Read-Only by Default
The risk check reads public on-chain state and never asks for a transaction. You can inspect any position without connecting a wallet.
Signatures, Not Approvals
A rescue uses a one-time EIP-712 signature, not an ERC-20 token approval. There is no standing permission for Guardian to move your assets. The signature is scoped to one rescue, one nonce, one operator, and a one-hour deadline.
Execution Safety Checks
Before any rescue is submitted, the system re-validates signature validity, deadline, nonce, health factor, swap liquidity, and gas price. If any check fails, execution is blocked and costs you nothing. After execution, a public proof is generated with the transaction hash and before/after health factor.
Your Responsibilities
Keep your wallet's private keys secure. Guardian Rescue will never ask for your seed phrase. If you want to prevent a pending authorization from executing, you can repay debt or withdraw collateral on Aave — the authorization expires on its own after one hour.