Lynk Wallet
Launching May 30, 2026
Written so you can verify.

Architecture

Written so you can verify.

For developers, security researchers, and anyone who wants to verify our claims by reading them. ADRs are public.

Six layers · top to bottom

From your face to the chain, in detail.

  1. Identity

    Turnkey passkey enclave

    Sign-in = device Passkey + device biometric. Key material exists only inside the Turnkey-managed TEE — not on Lynk servers, not in browser storage.

  2. Account

    Safe smart account · Polygon

    Each user gets a Safe modular smart account. Audited 6+ times, used in production by many treasuries. Survives Lynk: importable into Safe{Wallet}, Rabby, or any Safe-compatible client.

  3. Policy

    Lynk policy contract

    Daily caps, step-up auth thresholds, and approval ceilings live as a Safe module on-chain. You configure them. Not changeable while a transaction is pending.

  4. Defense

    4-layer phishing screen

    Off-chain pre-broadcast pipeline. Transaction simulation → recipient verification → daily-limit / step-up auth check → unified anomaly alerts. Sub-200 ms median latency.

  5. Sponsorship

    ERC-4337 paymaster

    v1 sponsors gas. The paymaster contract receives funds from a treasury contract on a fixed schedule — independent of Lynk's company state.

  6. Recovery

    Multi-device + social recovery

    At least one backup device recommended. With social recovery registered, a majority can authorize a new device. The only failure mode is losing every device and every social recovery contact at once — stated explicitly.

Public materials

Read first, then verify.

Threat model

Adversaries we design against: phishing dApps, drainer contracts, malicious approvals, compromised devices, social engineering, post-key-leak revocation. Each gets a layer.

Published at beta launch

ADR index

Why Polygon (not mainnet) · Why Safe (not custom account) · Why Passkey (not seeds) · Why selective open-source. Each decision documented with the alternatives we rejected.

Published at beta launch

Public reference impl.

A minimal public TypeScript client showing Lynk talking to Turnkey, Safe, and the policy contract. Enough to verify the on-chain flow without seeing the defense pipeline source.

Published at beta launch

Begin

One biometric. One wallet.

No exchange KYC. No 12-word backup. See you May 30, 2026.

Live 2026.5.30
Security model