Skip to main content

Security Enhancements

Additional protection and recovery options for your funds.

Current Security​

LazaiTrader already provides strong security:

FeatureStatus
Non-custodial SCW✅ Active
Owner-only withdrawals✅ Active
DEX whitelist✅ Active
Deterministic addresses✅ Active

Planned Enhancement: Backup Recovery Platform​

The Challenge​

While your SCW is secure, accessing it depends on:

  • Your Telegram account
  • LazaiTrader bot availability

What if:

  • Telegram is unavailable?
  • Your Telegram account is locked?
  • LazaiTrader services are down?

The Solution​

A backup recovery platform that lets you access your funds independent of Telegram.

How Backup Recovery Works​

The Security Guarantee​

Your SCW smart contract has a fundamental property:

address public immutable owner;  // Your EOA

function withdrawAllTokens(address _token) external {
    // Funds ONLY go to owner
    IERC20(_token).safeTransfer(owner, balance);
}

This means only your registered wallet can receive funds - regardless of who initiates the withdrawal.

Backup Platform Concept​

┌─────────────────────────────────────────────────────────────┐
│                    Backup Recovery Platform                  │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│  1. Connect with your registered EOA                        │
│  2. Prove ownership via signature                           │
│  3. View all your SCW balances                              │
│  4. Initiate withdrawal to YOUR wallet                      │
│                                                             │
│  Works even if Telegram is unavailable                      │
│  Works even if LazaiTrader bot is down                      │
│                                                             │
└─────────────────────────────────────────────────────────────┘

Why This Works​

Smart Contract Guarantees​

The withdrawal destination is immutable:

ScenarioWithdrawal Goes To
Via Telegram botYour EOA ✅
Via backup platformYour EOA ✅
Via direct contract callYour EOA ✅
Any other methodYour EOA ✅

There is no way to change where funds go.

No Trust Required​

The backup platform:

  • Cannot redirect your funds
  • Cannot access your private keys
  • Only facilitates a withdrawal you could do directly

Backup Platform Features​

Planned Capabilities​

FeatureDescription
Wallet connectConnect any Web3 wallet
Balance viewSee all SCW holdings
WithdrawalSend funds to your EOA
Cross-chainWorks on all deployed chains
No account neededJust connect and prove ownership

How to Use (Planned)​

1. Go to backup.lazaitrader.com (example)
2. Click "Connect Wallet"
3. Connect your registered EOA
4. Sign message to prove ownership
5. View your SCW balances
6. Click "Withdraw All" or select specific tokens
7. Confirm transaction
8. Funds arrive in your connected wallet

Alternative Recovery Methods​

Even without a dedicated backup platform, you can always recover funds directly:

Direct Contract Interaction​

Using any block explorer:

  1. Go to Metis Explorer
  2. Find your SCW address
  3. Go to "Write Contract" tab
  4. Connect your registered wallet
  5. Call withdrawAllTokens(tokenAddress)
  6. Confirm transaction

Using Ethers.js/Web3​

// Connect with your EOA
const wallet = new ethers.Wallet(privateKey, provider);

// SCW contract interface
const scw = new ethers.Contract(scwAddress, SCW_ABI, wallet);

// Withdraw tokens
await scw.withdrawAllTokens(tokenAddress);

Additional Security Features​

Planned Enhancements​

FeatureDescription
Activity alertsEmail/push for unusual activity
Rate limitingPrevent rapid successive trades
Emergency pauseHalt trading if issues detected
Multi-sig optionMultiple signatures for large withdrawals

Activity Monitoring​

🔔 Alert: Unusual Activity Detected

Your SCW executed 5 trades in 10 minutes.
This is higher than typical activity.

Recent trades:
• SELL 0.5 ETH @ 10:01
• SELL 0.3 ETH @ 10:03
• SELL 0.4 ETH @ 10:05
...

[View Details] [Pause Trading] [Withdraw All]

Trust Model Enhancement​

Current Trust​

ComponentTrust Level
Smart contractHigh (code is law)
Bot availabilityMedium
TelegramMedium

With Backup Platform​

ComponentTrust Level
Smart contractHigh (unchanged)
Bot availabilityLow (backup exists)
TelegramLow (backup exists)

Emergency Procedures​

If Telegram Is Unavailable​

  1. Don't panic - your funds are safe
  2. Use backup platform or direct contract call
  3. Withdraw to your EOA
  4. Wait for services to restore

If LazaiTrader Is Down​

  1. Trading stops (no new trades)
  2. Existing funds are safe in SCW
  3. Use backup recovery to withdraw
  4. Await service restoration

If You Lose Telegram Access​

  1. Recover Telegram account if possible
  2. Use backup platform with your EOA
  3. Withdraw funds
  4. Re-register with new Telegram if needed

FAQs​

Do I need to set up backup recovery?​

No setup needed. Your registered EOA already has withdrawal permission. The backup platform just makes it easier.

What if I lose access to my EOA?​

This is critical - your EOA is the only withdrawal destination. Always backup your seed phrase securely.

Can hackers use the backup platform?​

Only if they have your EOA private key. The platform doesn't add any new access - it just provides a convenient interface for existing permissions.

Is this live yet?​

The backup platform is planned. However, you can always recover via direct contract interaction today.

Your Responsibility​

Even with all these safeguards, you must:

ActionWhy
Backup seed phraseOnly way to recover EOA
Secure your devicesProtect wallet access
Monitor activityCatch issues early
Understand the systemKnow how to recover

Further Reading​