How Aetheria checks a swap before you sign

Checked in your browser, not only on our server

Our server prepares each swap, but this page does not take its word for it. Before anything is shown for signing, the page checks the swap against what you asked for, with rules and contract addresses built into the page itself.

What is checked

The contract: every router and vault a transaction may go to is in a list compiled into the page, with its source and the date it was verified. Anything else is refused.

The transaction itself: it is decoded, and the asset, the amount, the receiving address, the minimum and any fee must match what you chose.

A simulation before signing: every transaction is simulated first and must succeed. For same-chain and Chainflip Vault swaps the simulation also traces every movement of funds, which must match what was verified; if your wallet cannot run it, PublicNode does, as the page states next to the result.

The value: for every same-chain and Vault swap, the page reads prices from THORChain itself and refuses a swap whose minimum is worth far less than what you send. When THORChain has no price for one of the tokens of a same-chain swap, the page asks KyberSwap for the same swap itself and refuses a quote that does not match.

The protocol’s own state: vaults, pauses and deposit addresses are read again from the protocol, not from our server, right before you sign or send.

Approvals: a token approval is only ever for the exact amount of the swap, to a contract in the list. Unlimited approvals and off-chain permits are never requested.

What Aetheria never does

It never holds your funds, private keys or seed phrases. It never asks you to sign a message that lets someone else move your tokens. Addresses are screened against the official US sanctions list before a swap is prepared.