Client-controlled wallets, advisory oversight.

In some situations, a client-controlled wallet may be the right structure for digital assets that require on-chain interaction. In those cases, the client controls the wallet and the recovery path. Protocol Wealth’s role is limited by documented permissions, strategy parameters, and human fiduciary oversight.

We do not receive client private keys. We do not control client recovery materials. We do not have authority to move assets to Protocol Wealth wallets. Policy changes that expand or alter permissions require the required client and firm approvals.

This structure is designed to separate advisory authority from unilateral control. It remains subject to client agreements, system configuration, compliance review, and legal analysis.

Fordefi may be used as institutional MPC (multi-party computation) wallet technology to apply policy rules to a client-controlled wallet — a whitelist-bounded managed sleeve. The client administers the wallet's Rules Policy and holds final approval. The default posture is deny-first: activity is blocked unless a specific permission is approved. The approved allowlist can include third-party and DeFi contracts — for example vaults surfaced through vaults.fyi (such as Morpho, Midas, Lagoon, or Upshift vaults), a DEX like Uniswap, a lending market like Aave or Morpho, or the Across bridge. Within the strategies a client has approved, Protocol Wealth may act on a discretionary basis; where it is simply enabling the client's own wallet to interact with a vault at the client's direction, that step is non-discretionary. Protocol Wealth cannot add destinations or move assets outside the client-approved whitelist, and policy changes that expand or alter permissions require the required client and firm approvals.

Fordefi is wallet and policy infrastructure. It is not a qualified custodian, and using it does not, on its own, make an arrangement non-custodial. Wallet policy engines also have limits — for example, they may not fully inspect nested transaction data in every on-chain interaction — so the firm pairs policy rules with destination allowlists, amount and allowance limits, multi-approver rules for material transactions, and transaction review where needed.

Clients may use an independent backup or recovery process. The client chooses the approach — for example, an independent recovery provider such as Coincover, or the client’s own backup and disaster-recovery process.

Where a third-party recovery provider is used, the recovery relationship is in the client’s name, and the arrangement is designed so that Protocol Wealth does not receive the client’s private keys. Recovery material needed to access the wallet is delivered to the client, not to the firm.