Security Model

FarFISH's security is built on a simple principle: you always control your assets. Understanding how this works helps you use FarFISH with confidence.

Core Security Principle: Non-Custodial Design

FarFISH never holds your funds. This is the foundation of the entire security model.

What Non-Custodial Means

Traditional centralized platforms:

• You deposit assets into the platform's wallet
• Platform controls the private keys
• You must trust the platform to return your assets
• If platform is hacked, your assets are at risk
• If platform shuts down, you may lose access

FarFISH's non-custodial model:

• Assets stay in your wallet or smart contracts
• You control your private keys
• Every action requires your wallet signature
• Even if FarFISH servers are compromised, assets stay safe
• Platform shutting down doesn't affect your blockchain assets

What You Control

✅ Private keys - Stored in your wallet, never transmitted to FarFISH ✅ Transaction approval - Every blockchain action requires your signature ✅ Asset transfers - You can move NFTs and tokens anytime ✅ Staking decisions - You choose when to stake and which lock duration

What FarFISH Controls

✅ Off-chain data - Leaderboard rankings, referral records (informational only) ✅ Smart contract deployment - Contracts are deployed once and then immutable (or governed by multisig) ❌ Your assets - FarFISH cannot move or freeze your NFTs or tokens

Security by Layer

FarFISH's two-layer architecture creates different security profiles:

Off-Chain Layer Security

What's at risk: Display data and gaming progress

Threat: Database compromise or manipulation

Impact if breached:

• Leaderboard rankings could be altered (display fraud)
• Referral counts could be changed (historical records)
• Task completion could be modified (gaming progress)

What stays safe:

• Your NFTs (on blockchain)
• Your tokens (on blockchain)
• Your staking positions (on blockchain)
• Your private keys (never stored by FarFISH)

Real-world analogy: It's like someone changing the scoreboard at a game. The displayed score might be wrong, but it doesn't change who actually won or the prizes already awarded.

On-Chain Layer Security

What's at risk: Your actual assets

Threat: Smart contract vulnerabilities

Impact if vulnerability exists:

• Could potentially affect staked NFTs
• Could impact token distribution logic
• Could interfere with claim mechanisms

Mitigation:

• Multisig governance protects protocol-controlled funds
• Start with smaller amounts until confidence is established
• Only stake what you can afford to lock

What stays safe even with contract bugs:

• Non-staked NFTs in your wallet
• Tokens in your wallet (not approved to contracts)
• Assets on other blockchain networks

Threat Scenarios

Scenario 1: FarFISH Servers Go Offline

What happens:

• ❌ Website and apps become inaccessible
• ❌ Leaderboard data unavailable
• ❌ Cannot interact with FarFISH UI

What still works:

• ✅ Your NFTs remain in your wallet
• ✅ Your tokens remain in your wallet
• ✅ You can transfer assets to other wallets
• ✅ Staked assets can be unstaked directly from contracts (using tools like Basescan)

Recovery: Even permanent FarFISH shutdown doesn't affect blockchain assets.

Scenario 2: Database Compromise

What an attacker could do:

• Modify leaderboard rankings
• Change referral counts
• Corrupt task progress data
• View wallet addresses (already public on blockchain)

What an attacker cannot do:

• Steal NFTs (blockchain-controlled)
• Transfer tokens (requires your wallet signature)
• Modify staking state (smart contract enforced)
• Access private keys (never stored)
• Force unauthorized transactions (wallet approval required)

User impact: Minimal. Display data might be incorrect, but real assets stay safe.

Scenario 3: Phishing Attacks

The threat:

• Fake FarFISH websites that look legitimate
• Malicious browser extensions
• Fake support messages asking for seed phrases

How to protect yourself:

• Always verify the URL matches official FarFISH domains
• Never share your seed phrase or private keys with anyone
• Review transaction details in your wallet before signing
• Use hardware wallets for large holdings
• Enable wallet security features (transaction simulation, spending limits)

FarFISH will never:

• Ask for your seed phrase
• Request your private keys
• Send unsolicited direct messages
• Pressure you to make urgent transactions

Scenario 4: Smart Contract Vulnerability

The threat:

• Bugs in staking contract could lock NFTs
• Flaws in claim controller could be exploited
• Token contract issues could affect distribution

What protects you:

• Multisig governance (no single person controls protocol funds)
• Time-delayed upgrades (if contracts are upgradeable)
• Community testing and review
• Transparent code (can be audited by anyone)

Your responsibility:

• Start with smaller amounts
• Understand staking locks before committing
• Accept that smart contract risk exists

Industry context: Even audited smart contracts have had bugs. No contract is 100% risk-free, but proper design minimizes this.

Wallet Security Best Practices

Your wallet is your responsibility. FarFISH can't protect you from wallet compromises.

Essential Practices

1. Secure Your Seed Phrase

• Write it down on paper (never digital storage)
• Store in a secure location (safe, safety deposit box)
• Never photograph it
• Never share it with anyone, ever

2. Use Hardware Wallets for Large Holdings

• Ledger, Trezor, or similar
• Private keys never leave the device
• Immune to computer malware
• Worth the investment for significant value

3. Review Before Signing

• Check contract address matches FarFISH's official contracts
• Verify function name matches your intended action
• Confirm parameter values (token ID, amount, duration)
• Watch for unexpected token approvals

4. Enable Wallet Security Features

• Transaction simulation (show expected outcome before signing)
• Spending limits (cap maximum transaction size)
• Trusted contract lists
• Phishing detection

5. Separate Wallets for Different Purposes

• Hot wallet for daily use (small amounts)
• Cold wallet for long-term holdings (large amounts)
• Never keep all funds in one place

Multisig Governance Protection

FarFISH uses multisig (multi-signature) governance to protect protocol-controlled funds.

What is multisig?

• Multiple private keys required to execute sensitive operations
• Example: 3-of-5 means any 3 out of 5 keyholders must approve
• Prevents single point of failure or rogue actor

What multisig protects:

• Protocol treasury funds
• Smart contract upgrades (if contracts are upgradeable)
• Parameter changes
• Emergency pause functions

What multisig doesn't protect:

• Your personal wallet (you control it completely)
• Assets you've staked (smart contract logic determines access)

Multisig ensures no single person can drain protocol funds, even if they work for FarFISH.

Network-Level Security

RPC Node Reliability

FarFISH connects to Base blockchain through multiple providers:

Four-tier fallback:

1. Official Base RPC (highest trust)
2. PublicNode RPC
3. OnFinality RPC
4. LlamaRPC

Why this matters:

• If one provider is compromised or fails, others continue working
• Reduces risk of false data from single malicious node
• Ensures high availability

RPC node risk: A malicious RPC could show false data (incorrect balances) but cannot steal assets. Your wallet signature is still required for any transaction.

Blockchain Finality

Base is an optimistic rollup:

What this means:

• Transactions confirm in ~2-5 seconds (soft confirmation)
• Full finality takes ~7 days (challenge period)
• For normal usage, soft confirmation is sufficient

Risk: Extremely low probability of transaction reversal during challenge period. In practice, soft confirmations are reliable for transactions like NFT mints and stakes.

Data Privacy

What FarFISH knows about you:

• Your wallet address (public blockchain data)
• Actions you take in FarFISH apps (referrals, tasks)
• On-chain transaction history (public on blockchain)

What FarFISH doesn't know:

• Your real identity (unless you share it)
• Your other wallet addresses (unless you connect them)
• Your private keys or seed phrase (never transmitted)

Public blockchain data:

• All Ethereum/Base transactions are public
• Anyone can see your NFT holdings, token balance, transaction history
• Wallet addresses don't inherently reveal identity, but can be linked if you connect them to known accounts

Privacy tip: Use separate wallets for different activities if you want to keep them unlinked.

Approval Management

When you approve a contract to spend your tokens or NFTs, that approval persists:

How approvals work:

1. First time staking, you approve the staking contract
2. Contract can now move your NFTs (within its programmed logic)
3. Approval remains until you revoke it

Managing approvals:

• Use tools like Basescan to view active approvals
• Revoke approvals for contracts you no longer use
• Only approve trusted, audited contracts

FarFISH approvals:

• NFT approval for staking contract (required for staking)
• Token approval for claim distribution (if applicable)

These approvals only grant specific permissions, not blanket access to all your assets.

Security Checklist for Users

Before using FarFISH:

✅ Verify you're on official FarFISH domains ✅ Ensure your wallet is secure (seed phrase backed up) ✅ Review FarFISH's official contract addresses ✅ Understand non-custodial means you're responsible for your assets ✅ Start with small amounts to test the system

When using FarFISH:

✅ Review every transaction before signing ✅ Check contract addresses match official addresses ✅ Verify function names match your intended actions ✅ Never share your seed phrase or private keys ✅ Report suspicious activity or phishing attempts

Emergency Scenarios

If you suspect your wallet is compromised:

1. Immediately transfer assets to a new, secure wallet
2. Revoke all approvals from the compromised wallet
3. Never reuse the compromised wallet

If you discover a security vulnerability:

1. Do not disclose it publicly (protects other users)
2. Contact FarFISH security team through official channels
3. Provide detailed information to help with fixes

If FarFISH website is unavailable:

1. Your blockchain assets remain safe
2. Do not use unofficial mirrors or clones
3. Wait for official communication through trusted channels

Conclusion

FarFISH's security model prioritizes asset protection through:

• Non-custodial design - You always control your assets
• Layered architecture - Off-chain speed, on-chain security
• Multisig governance - Protocol funds protected by multiple keyholders
• Transparent operations - All on-chain activity publicly verifiable

Your role: Secure your wallet, review transactions, and practice good security hygiene. FarFISH provides the infrastructure; you provide the vigilance.

Next Steps

• Understand the blockchain layer in On-Chain Layer
• Learn about blockchain security in On-Chain Layer
• Review contract addresses in Smart Contract Addresses
• Review the FAQ for common security questions

Last updated: October 12, 2026