Security

Security depends on both Rocky's systems and the user's wallet practices.

User responsibilities

• Use only official Rocky domains and verified wallet software.

• Keep recovery phrases, private keys, and passwords offline and private.

• Review every wallet request before approving it.

• Confirm the active wallet account and Canton Mainnet before trading.

• Verify the recipient, asset, and amount before a transfer.

• Start with a small test transaction when using a new workflow.

• Do not trust unsolicited support messages or links.

Rocky support will never ask for your recovery phrase, private key, or wallet password.

Protocol and operational security

Information about audits, monitoring, incident response, bug-bounty programs, and other security controls should be linked here when officially published.

Do not describe an audit or security program as complete until the corresponding report or official announcement is publicly available.