Crypto FAQ

Do I need a wallet to use the tools?

No. Every tool on this site works without a wallet. The Void Index scorer, Vocabulary Scorer, Personal Void Inventory, and Risk Map all run entirely in your browser. No login, no account, no wallet required.

So what's the wallet for?

Two things, both optional:

• Attribution. If you submit a void score to the public database, the wallet lets you prove you did it. Your address is your identity — no email, no password, no personal info.
• Bounties. Falsification bounties ($500–$1,000) pay out in USDC to your wallet. No wallet, no payout.

What data do you collect?

Your public wallet address — that's it. We don't ask for your name, email, or any personal information. The wallet address is pseudonymous by default. We never request permission to sign transactions or move funds. The only thing we sign is a challenge message to prove you own the address.

Which wallet should I use?

We support any Solana wallet. The two most popular:

Both work as browser extensions (Chrome, Firefox, Brave, Edge) and as mobile apps.

Step-by-step setup

1. Install the extension. Go to phantom.app or solflare.com and install the browser extension. Only install from the official site — never from a random link.
2. Create a wallet. The extension will generate a new wallet. You'll get a seed phrase — 12 or 24 words. Write this down on paper. Not in a notes app. Not in a screenshot. Paper.
3. Store the seed phrase safely. This is the only way to recover your wallet if your device dies. Anyone who has these words has your wallet. There is no "forgot password" — this is the tradeoff of self-custody.
4. Come back and click Connect. The site will detect your wallet. Click "Connect" in the nav. Your wallet extension will ask for approval — this only shares your public address. We never ask to sign transactions.
5. Sign the verification. We'll ask you to sign a short text message to prove you own the address. This costs nothing — it's a signature, not a transaction. No SOL needed.

Can this site drain my wallet?

No. We use signMessage — a read-only signature that proves you own an address. We never call signTransaction or request transaction approval. The wallet extension itself shows you exactly what's being requested. If you ever see a transaction approval popup from any site you didn't expect, reject it.

What if I have both Phantom and Solflare installed?

The site will show a wallet picker so you can choose. Once you pick one, it remembers your preference for next time. You can always switch by disconnecting and reconnecting.

General crypto safety rules

• Never share your seed phrase. No legitimate site, person, or support agent will ever ask for it.
• Bookmark official sites. Phishing sites look identical to real ones. Type the URL or use bookmarks.
• Approve only what you understand. If a popup asks to sign a transaction you didn't initiate, reject it.
• Use a dedicated browser profile for crypto if you're holding significant value.
• Hardware wallets (Ledger, Trezor) add a physical approval step. Solflare has built-in Ledger support.

Isn't that hypocritical?

No — and this is the key insight the framework provides. A void score is not a moral judgment. It's a structural measurement. A knife scores high for sharpness. You still use it to cut food.

The score tells you where the attention gradient pulls and how strong the pull is. Knowing the score changes your posture from interlocutor (engaging the void as if it has agency) to observer (studying the architecture). That posture shift is the entire point of the framework.

What makes using crypto safer?

The framework identifies three constraint properties that counteract void conditions:

• Transparency: Blockchain itself scores well here — every transaction is public, every contract is readable. Use this. Verify on-chain. Read the contract.
• Invariance: Fixed protocol rules (Bitcoin's 21M cap, Solana's consensus mechanism) are invariant constraints. Narrative ("this will 100x") is not. Know which is which.
• Independence: Use external reference points that don't profit from your engagement. A friend who doesn't hold the same bag. A budget that exists before the trade.

Why Solana specifically?

Practical reasons: low fees, fast finality, mature wallet ecosystem, direct signature auth (no intermediary). The wallet signature is all we need — proof-of-authorship without a transaction. We're not asking you to invest in Solana, stake SOL, or participate in DeFi. We're using the identity layer.

What's the difference between signing a message and signing a transaction?

Message signature = proof you own the address. Like signing a piece of paper. Costs nothing, moves nothing, visible only to the site that requested it.

Transaction signature = instruction to move funds or interact with a smart contract. Costs gas (SOL), changes on-chain state, irreversible. We never ask for this.

What's USDC?

A stablecoin pegged 1:1 to USD. Issued by Circle. One USDC = one US dollar. Bounties are denominated in USD and paid in USDC so contributors get predictable value without touching volatile tokens.

What's a seed phrase and why does it matter?

12 or 24 words that generate your wallet's private key. If someone has these words, they have full control of your wallet. There is no recovery service, no support ticket, no "forgot password." This is by design — it means nobody (including us) can freeze, seize, or access your funds. The tradeoff is that you are responsible for the words.

Why not just use email login?

Email login requires us to store your email, manage passwords, handle resets, and maintain a user database. Wallet auth requires us to store nothing — the proof is cryptographic, stateless, and self-sovereign. Less data stored = less to protect = less to leak. A project about reducing opacity should minimize the data it collects.

I don't trust crypto at all. Can I still use the site?

Yes, completely. Every tool works without a wallet. The scoring system, the vocabulary analysis, the network visualization, the papers — all of it is open and free. The wallet is only for attribution and bounty payouts. If those don't matter to you, ignore the Connect button entirely.

Architecture

The wallet system is three files, all view-source readable:

• wallet-auth.js — Provider detection, session management, challenge-response signing. No framework, no npm, no build step.
• wallet-ui.js — Renders the connect button and profile dropdown in the nav. Pure DOM manipulation.
• wallet.css — Styles. That's it.

Wallet detection order

The system checks for wallets in this order: stored preference first, then Solflare, then Phantom, then generic Solana provider (Backpack, etc.). Once you connect, your choice is saved. If you have multiple wallets installed, a picker lets you choose.

What gets stored in your browser

• morr_wallet_session — Your public address, wallet name, verification status, connection timestamp. Expires after 24 hours.
• morr_wallet_preference — Which wallet you last used (e.g., "Solflare"). Persists until cleared.
• morr_wallet_profile — Optional display name and public profile toggle. You set these, they stay local.

No cookies. No analytics. No third-party scripts. localStorage only.

Auth flow

1. Detect provider. Check window.solflare, window.phantom.solana, or window.solana.
2. Connect. Call provider.connect() — wallet extension shows approval popup. User approves. We get the public address.
3. Challenge. Backend sends a random nonce (or one is generated locally if backend isn't deployed yet).
4. Sign. Call provider.signMessage(bytes) — wallet shows the message text. User signs. We get a cryptographic signature.
5. Verify. Signature proves address ownership. Session saved locally. Done.