App wallet

The wallet DFM creates for you, who signs what, and your controls.

What it is#

A Solana wallet created for you at your first sign-in, which DFM’s server signs with on your behalf. It holds your USDC, your SOL and your fund shares, and every fund operation runs from it: launching, depositing, redeeming, rebalancing, editing a basket or a policy, cancelling a deposit. If you signed in with a wallet of your own, that wallet is your identity, never the account.

Who signs what#

If you signed in with a wallet of your own, it signs exactly two things:

  1. the sign-in message;
  2. a transfer you choose to make into your app wallet.

Everything else is signed by the app wallet, server-side. That is what lets the agent act for you.

Money out#

Withdrawals go to a withdrawal wallet you save in Settings → App wallet. Your sign-in wallet is never a withdrawal destination. Each asset in Portfolio is withdrawn to the saved wallet; SOL is sent down to what the account needs to stay open.

Your controls#

  • Export the private key. Take the key and use the wallet anywhere. Exporting is final: an exported key ignores every cap, and DFM keeps signing with the same wallet.
  • Revoke. A kill switch: DFM stops signing and sends your balance to you.
  • Re-arm. Turn the app wallet back on after a revoke.
  • Caps. Limits you set on what the server may sign. No caps means no limit.

⚠ What this means for custody

The app wallet is a deliberate trade: no popups, and agents that can act for you — in exchange for DFM’s server holding the power to sign for that wallet. Keep in it what you are using, and use revoke or export whenever you want that power back.