NERO

NERO Embedded Wallets

Non-custodial wallet infrastructure for NERO Chain — social login, threshold signatures, account abstraction

NERO Embedded Wallets

Embedded wallet infrastructure that lets your users create non-custodial wallets through social login — no seed phrases, no browser extensions, no crypto knowledge required.

Users authenticate with Google, Discord, LINE, Apple, or any of 9 OAuth providers, and receive an MPC-secured wallet in seconds. The private key is split between the user's device and the NERO backend using threshold cryptography. Neither party can act alone — the full key is never reconstructed on any single machine.

How It Works

Platform Architecture

Your App  →  NERO MPC SDK (browser)  →  NERO MPC Auth (backend)
                    │                            │
             Client key share              Server key share
             (encrypted, device)           (HSM-protected, distributed)
                    │                            │
                    └──── Both cooperate to sign ─┘
                         Full key never assembled

The platform consists of three components:

  • NERO MPC SDK — browser library your app integrates. Handles authentication, wallet generation, signing, and React hooks.
  • NERO MPC Auth — production backend implementing the server side of MPC protocols. HSM-backed key storage, distributed Shamir sub-shares, 11-layer security middleware, and audit logging.
  • NERO Dashboard — developer portal for project management, API keys, OAuth configuration, analytics, and billing.

Key Capabilities

Security at Every Layer

LayerProtection
ClientKey share encrypted with AES-256-GCM device key, stored in IndexedDB
TransportHTTPS + ECDH ephemeral encryption for share exchange during key generation
ServerKey shares wrapped by HSM (AWS KMS / GCP Cloud KMS), encrypted at rest
DistributionServer share split via Shamir's Secret Sharing across multiple nodes
ProtocolSchnorr proofs and Feldman VSS commitments verify correct execution
AccessRate limiting, CORS enforcement, device fingerprinting, MFA gating, audit logging

Start Building

On this page