TokenLume
Trust

Wallet safety and CIP-30

TokenLume never asks for seed phrases. Learn what CIP-30 wallet connect does and does not do.

What TokenLume never requests

  • Seed phrases / recovery phrases
  • Private keys
  • Spending passwords
  • Transaction signing for core analytics features

Anyone asking you to “verify” a TokenLume account by entering a seed phrase is attempting theft. Close the tab and report via Contact.

Optional CIP-30 connect

The header Connect control uses CIP-30 (`enable`) to read addresses from a browser wallet (Eternl, Lace, Yoroi, and others when injected). TokenLume checks mainnet, prefers a stake/reward address when available, and navigates to a read-only wallet profile. The last connected address may be remembered in sessionStorage for UI convenience.

This path does not ask the wallet to sign spending transactions for portfolio viewing. Ownership verification for saved account wallets is a separate, explicit flow when used.