100% non-custodial
Soroban 2-of-3 vault. The client holds the keys. Nirium can never move your funds. Period.
Three keys. Two signatures.
Any critical vault operation requires 2 of 3 signatures. No one can move funds alone.
Founder, CEO or primary decider
CTO, Operations or Admin
Legal, Board or external advisor
What requires 2-of-3 multisig
Automatic operations
The agent can execute without additional signature under preconfigured limits:
- Move idle capital in and out of the strategy, inside your own vault
- Up to the max_execution_amount the owner set when delegating
- Reports and queries (read-only)
Critical operations
These require 2 human signatures, no exceptions:
- Any withdrawal — only the vault owner can sign it
- Cosigner changes
- Emergency vault pause
- Vault closure
What Nirium CANNOT do
Not a legal disclaimer — a technical impossibility at the Soroban contract level.
The real contract
NiriumVault is deployed on Stellar Testnet and is verifiable.
CBTWMZCG3P72EHFAQ4ZLSEBIOFYJC244H5J6DHZIJ56FHFWJ2CFAWSZUAudit
Vectors PASS · 0 critical · proprietary framework
Mainnet gate for the vault
JARGUS Internal Security AuditINTERNAL ONLY
This platform has undergone internal security verification using the JARGUS Automated Framework (83/83 vectors passed). JARGUS is a proprietary self-assessment tool — it does not replace professional third-party audits from firms such as OpenZeppelin, Trail of Bits, Halborn, or CertiK. Non-custodial nodes (settlement, payouts, audit, reporting) run on mainnet without holding funds; the treasury vault remains testnet-only until a formal external audit.