Asset Shield Terms

1. Introduction and Acceptance

These Shield Terms govern your access to and use of the Asset Shield service. By enrolling in, configuring, or otherwise using Asset Shield — including by deploying any Trust-Bound Asset wrapper, designating a Guardian Set, or initiating any on-chain operation associated with the Service — you acknowledge that you have read, understood, and agree to be bound by these Shield Terms and the Terms of Service. If you do not agree to these Shield Terms, you must not use the Service.

These Shield Terms are a supplement to, and do not replace, the ToS. In the event of any conflict between these Shield Terms and the ToS with respect to Asset Shield functionality, these Shield Terms shall prevail. In all other respects, the ToS remains in full force and effect.

2. Definitions

The following definitions apply throughout these Shield Terms. Terms not defined here have the meanings set forth in the ToS.

• "Asset Shield" means Zoryxon's identity-bound digital asset protection service, comprising the Trust-Bound Asset wrapper contracts, the Attestation Oracle, the Contest Registry, the TrustGraph, the Guardian Registry, the Recovery Module, the ShieldFactory, and associated front-end interfaces and tools.
• "Trust-Bound Asset" or "TBA" means a digital asset (fungible or non-fungible) that has been wrapped in a TrustBoundERC20 or TrustBoundERC721 contract such that transfers are subject to dual-condition execution requirements.
• "Identity Binding" means the cryptographic association between a Trust-Bound Asset (or account holding such assets) and a verified identity recorded through the Attestation Oracle.
• "Trust Attestation" means an EIP-712 typed structured signature issued by an authorized attestation provider that asserts the identity, humanity level, and verification state of a given wallet at a given time.
• "Attestation Oracle" means the AttestationOracle smart contract, which aggregates Trust Attestations from multiple providers using stake-weighted median consensus and anchors post-quantum (ML-DSA-65 / FIPS 204) signature hashes.
• "Contested State" means the status of a Trust-Bound Asset whose transferability has been suspended pending resolution under the Contested State Protocol.
• "Guardian" means an address designated by a User to participate in threshold-based recovery of an Identity Binding.
• "Guardian Set" means the collection of N Guardians designated by a User, together with the associated M-of-N Threshold and Time Delay.
• "Recovery Module" means the RecoveryModule smart contract, which implements M-of-N guardian recovery with a mandatory contest window and emergency freeze capability.
• "Threshold" means the minimum number (M) of Guardians from a Guardian Set of size N required to authorize a recovery action.
• "Time Delay" means the mandatory waiting period between initiation and execution of a recovery action (default seventy-two (72) hours, configurable subject to a minimum).
• "TrustGraph Status" means the ecosystem-wide trust state recorded on-chain for a given asset or wallet, having one of the following values: Clean, Contested, Flagged, Resolved, or Sanctioned.
• "Self-Resolution" means resolution of a Contested State by the owner through submission of a fresh, valid Trust Attestation.
• "Committee Resolution" means resolution of a Contested State by threshold signatures of an authorized resolution committee.
• "Appeal" means an escalation of a Contested State resolution requiring the posting of an increased stake.
• "ShieldFactory" means the ShieldFactory smart contract, which deploys TrustBound wrapper instances for User assets.

3. Description of Asset Shield Service

3.1 Purpose

Asset Shield is an identity-bound asset protection service designed to render stolen or misappropriated digital assets economically unusable. By binding a digital asset to a verified identity at the protocol layer, Asset Shield ensures that unauthorized holders cannot meaningfully transfer, sell, or otherwise realize value from the asset even if they obtain the underlying private key.

3.2 Dual-Condition Transfers

Trust-Bound Assets implement a dual-condition transfer model. In addition to a valid cryptographic signature from the holding wallet, each outbound transfer requires a valid, unexpired Trust Attestation from the Attestation Oracle. A valid key signature alone is insufficient; a transfer will only execute when both conditions are satisfied. Absence of a valid attestation causes the transfer to revert or, depending on the configuration of the specific wrapper instance, to trigger the Contested State Protocol.

3.3 Contested State Protocol

Where configured, failed attestations and third-party challenges place an asset into a Contested State. During a Contested State, the asset remains visible on-chain but is not transferable. Contested States are resolved through the procedures described in Section 7.

3.4 Guardian Recovery System

Users may designate a Guardian Set consisting of N Guardians with an M-of-N Threshold and a Time Delay. Upon loss of wallet access, the Guardian Set may collectively authorize transfer of the Identity Binding to a new wallet, subject to the procedures set forth in Section 6 and the Recovery Module.

3.5 TrustGraph Broadcasting

The TrustGraph contract publishes the current TrustGraph Status of each wrapped asset and a trust score (0–100) for participating wallets. The TrustGraph exposes a zero-gas view function (isSafe) enabling decentralized exchanges, marketplaces, and other third-party protocols to programmatically query the status of an asset prior to accepting it for trade. Zoryxon does not control whether or how third parties consume the TrustGraph, and makes no representation regarding third-party adoption.

4. Eligibility and Enrollment

To enroll in and use the Service, you must satisfy each of the following conditions on an ongoing basis:

4.1 Active Zoryxon Account in Good Standing

You must maintain an active Zoryxon account that is in good standing under the ToS and Acceptable Use Policy, and has not been suspended, terminated, or flagged for breach.

4.2 Compatible Self-Custody Wallet

You must use a compatible self-custody wallet (for example, MetaMask or any WalletConnect-compatible wallet) capable of signing EIP-712 typed data and interacting with the Arbitrum One network.

4.3 Identity Verification

You must complete identity verification at the level required for the Asset Shield configuration you select. Certain configurations, assets, or jurisdictions may require higher humanity verification levels. Failure to maintain a current verification may impair your ability to transact with your Trust-Bound Assets.

4.4 Acceptance of Terms

You must accept these Shield Terms and the underlying Terms of Service. Continued use of the Service constitutes your ongoing acceptance of any amendments made in accordance with Section 17.

5. User Responsibilities

By using the Service, you agree to each of the following responsibilities:

5.1 Identity Verification Currency

You are responsible for maintaining current, valid identity verification at the level required by your chosen configuration. Expired or invalidated verification may prevent the Attestation Oracle from issuing a valid Trust Attestation, which will impair your ability to transfer Trust-Bound Assets.

5.2 Guardian Set Management

You are responsible for designating, periodically reviewing, and updating your Guardian Set. You should select Guardians who are trustworthy, reachable, and capable of acting promptly in the event of a recovery request.

5.3 Wallet Security

Zoryxon is non-custodial. Zoryxon never holds, stores, or has access to your wallet private keys, seed phrases, or recovery material. You are solely responsible for the secure generation, storage, and use of your wallet credentials. Loss of wallet credentials may result in loss of control over your assets notwithstanding the protections offered by Asset Shield.

5.4 Contested State Awareness

You acknowledge that a Contested State freezes transfers of the affected Trust-Bound Asset pending resolution. You agree to monitor on-chain notifications and your Zoryxon dashboard for contest events affecting your assets.

5.5 Transaction Review

You are responsible for reviewing and understanding all on-chain transaction parameters — including counterparties, amounts, gas fees, contract addresses, and function calldata — before signing and broadcasting any transaction. Signed transactions are final and irreversible.

5.6 Prompt Response

You agree to respond promptly to attestation challenges, evidence requests, and guardian recovery notifications. Failure to respond within applicable windows may result in adverse default outcomes under the Contested State Protocol.

6. Guardian System

6.1 Designation

You may designate a Guardian Set consisting of N Guardians (recommended values: 3, 5, or 7) together with an M-of-N Threshold (a simple majority is recommended). The identity and availability of each Guardian are your responsibility.

6.2 Powers

Guardians, acting collectively at or above the Threshold, may authorize transfer of your Identity Binding to a new wallet address, thereby restoring your ability to transact with your Trust-Bound Assets.

6.3 Limitations

Guardians cannot move, sell, or otherwise transfer the underlying assets themselves without your separate, valid signature, except where such action is expressly authorized through a documented recovery flow executed in accordance with the Recovery Module. Guardians do not have custody of your assets at any time.

6.4 Time Delay

All recovery actions are subject to a mandatory Time Delay (default seventy-two (72) hours) between initiation and execution. The Time Delay is configurable by the owner subject to a protocol-defined minimum.

6.5 Owner Override

If you regain access to your wallet during the Time Delay, you may cancel a pending recovery at any time prior to execution by submitting a cancellation transaction signed with the affected wallet.

6.6 Guardian Removal and Replacement

You may add, remove, or replace Guardians, and may modify the Threshold and Time Delay, at any time. Such modifications are themselves subject to Time Delay safeguards to prevent compromise of the Guardian Set by an unauthorized actor who has temporarily obtained wallet access.

7. Contested State Protocol

7.1 Triggers

A Contested State may be triggered by any of the following: (a) a failed attestation in connection with a transfer attempt, where the applicable wrapper is configured to contest rather than revert; (b) a third-party challenge accompanied by the required stake; or (c) an ecosystem flag (including but not limited to sanctioned wallet designations or verified theft reports).

7.2 Lifecycle

Each contest progresses through the following states: Active → EvidencePeriod → AwaitingResolution → Resolved. During the EvidencePeriod, each party has a defined window within which to submit supporting evidence. The protocol transitions states automatically based on on-chain events and timers.

7.3 Resolution Paths

• Self-Resolution: the owner submits a fresh, valid Trust Attestation, discharging the contest in favor of the owner.
• Committee Resolution: an authorized resolution committee reaches an N-of-M threshold signature on a proposed outcome.
• Appeal: either party may escalate an outcome by posting an increased stake, subject to protocol limits on the number and cost of appeals.
• Timeout Default: if a party fails to act within the applicable window, the contest resolves per the protocol's default rules for that state.

7.4 Effect During Contest

While a Contested State is active, the affected Trust-Bound Asset remains visible on-chain but is non-transferable. The owner retains beneficial interest but cannot effect a transfer until the contest is Resolved.

7.5 Stakes

Challengers must post an on-chain stake to initiate a contest. Stakes found by the protocol to have been posted in bad faith (including frivolous or abusive challenges) are forfeited in accordance with the smart contract logic. Zoryxon does not hold or administer stakes; all stakes are custodied by the ContestRegistry contract.

8. AttestationOracle and Identity Attestations

8.1 Multi-Provider Model

The Attestation Oracle supports multiple independent attestation providers. Provider outputs are aggregated using a stake-weighted median, such that no single provider can unilaterally determine an attestation outcome.

8.2 EIP-712 Typed Structured Signatures

Attestations are issued as EIP-712 typed structured signatures under the domain "Zoryxon Trust Attestation" and are verifiable on-chain against provider public keys.

8.3 Post-Quantum Hash Anchoring

Each attestation carries a SHA-256 hash of a corresponding ML-DSA-65 (FIPS 204) post-quantum signature. This anchoring provides a path to post-quantum verification of historical attestations without requiring on-chain ML-DSA verification at the point of issuance.

8.4 Provider Stake and Slashing

Attestation providers must post and maintain stake. Providers found to have issued fraudulent or materially inaccurate attestations are subject to stake slashing in accordance with the Attestation Oracle's protocol rules.

8.5 Attestation Expiry and Renewal

Attestations carry an expiration timestamp. Expired attestations cannot satisfy the dual-condition transfer requirement. Users must obtain fresh attestations as needed to transact.

9. Fees

9.1 Subscription

Asset Shield is included in eligible Zoryxon subscription tiers. Current tier eligibility and pricing are published on the Zoryxon pricing page and are subject to change in accordance with the ToS and Section 17 of these Shield Terms.

9.2 Network Fees

You are responsible for all Arbitrum One network (gas) fees associated with on-chain operations of the Service, including binding, unbinding, transfers, contest actions, guardian designation, and guardian recovery. Network fees are paid to validators and are not retained by Zoryxon.

9.3 Stake Requirements

Users initiating challenges, appeals, or certain recovery actions may be required to post an on-chain stake. Stakes are held by audited smart contracts and returned, slashed, or redistributed in accordance with the protocol rules applicable to the action.

9.4 Oracle Service Fees

Attestation oracle providers may charge fees for issuing attestations. Applicable fees will be disclosed at the point of service. Zoryxon does not set, control, or guarantee third- party oracle provider fees.

10. Termination and Effect on Protected Assets

10.1 User-Initiated Unbinding

You may unbind Trust-Bound Assets at any time, subject to submission of a valid identity attestation and the absence of any active Contested State or pending recovery affecting the asset.

10.2 Subscription Termination

Termination or non-renewal of your Zoryxon subscription does not unbind Trust-Bound Assets. The underlying trust-binding smart contracts continue to operate on-chain independently of your access to Zoryxon's front-end platform. You may continue to interact with the contracts directly using any compatible wallet or tooling.

10.3 Account Termination by Zoryxon

Zoryxon may suspend or terminate your access to the Service for breach of the ToS, these Shield Terms, applicable law, or sanctions programs. On-chain protections previously configured by you remain in place and continue to operate per the protocol rules, and Zoryxon does not purport to unilaterally unwind or modify deployed bindings.

11. Blockchain Immutability

Asset Shield configurations recorded on Arbitrum One — including binding records, Guardian Set designations, attestations, and contest entries — are permanent and cannot be modified, reversed, or deleted by Zoryxon. Any modification must be effected through a new on-chain transaction executed in accordance with the applicable protocol rules. You acknowledge that this immutability is a core feature of the Service and is necessary to provide the protections Asset Shield offers.

12. Smart Contract Risk and No Insurance

12.1 Smart Contract Dependence

The Service depends on the correct execution of smart contracts deployed on Arbitrum One. While Zoryxon's contracts are subject to professional security audits, no audit can guarantee the absence of vulnerabilities. You accept the risk that undiscovered flaws, economic exploits, or integration issues may affect the Service.

12.2 Not Insurance

Asset Shield is NOT insurance. Zoryxon does not insure, guarantee, or indemnify you against loss, theft, devaluation, or destruction of digital assets. No premium paid to Zoryxon entitles you to reimbursement for lost assets.

12.3 Technical Mechanism, Not Guarantee of Recovery

Asset Shield is a technical protection mechanism designed to make stolen assets economically unusable. It is not a guarantee that you will recover possession of any asset, obtain any specific outcome in a contest, or avoid loss under any particular set of circumstances.

12.4 Network Availability

Zoryxon does not operate, and does not guarantee the availability of, Arbitrum One or any other underlying blockchain network. Network outages, congestion, chain reorganizations, or protocol changes may delay, disrupt, or otherwise affect Service operations.

13. No Legal Advice

These Shield Terms, and all materials describing the Service, are provided for informational purposes only and describe a technical service. Nothing in these Shield Terms, the Zoryxon platform, or any related documentation constitutes legal, financial, tax, or investment advice. You should consult qualified attorneys and other professional advisors regarding asset protection, estate planning, tax, regulatory, and other implications of using Asset Shield in your circumstances.

14. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ZORYXON DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. Please refer to the Disclaimers and Terms of Service for the full disclaimers, which are incorporated herein by reference.

15. Limitation of Liability

The limitation of liability provisions set forth in the Terms of Service are incorporated into these Shield Terms by reference. In addition to and without limiting those provisions, Zoryxon shall not be liable for any of the following:

• failed, delayed, or inaccurate attestations resulting from error, negligence, or malice of any attestation oracle provider;
• failure of a Guardian to act, respond, or perform correctly at any time;
• outcomes of contests determined under the Contested State Protocol, whether by Self-Resolution, Committee Resolution, Appeal, or Timeout Default;
• chain reorganizations, forks, halts, or other consensus events affecting Arbitrum One or any related network;
• smart contract bugs, exploits, or vulnerabilities in third-party protocols that interact with Trust-Bound Assets; and
• network congestion, gas price volatility, or transaction inclusion delays.

IN ADDITION TO ANY LIMITATIONS IN THE ToS, ZORYXON'S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO ASSET SHIELD SPECIFICALLY SHALL NOT EXCEED THE GREATER OF (A) THE ASSET SHIELD-ATTRIBUTABLE FEES ACTUALLY PAID BY YOU TO ZORYXON DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS (US$100).

16. Indemnification

The indemnification provisions set forth in the Terms of Service are incorporated into these Shield Terms by reference and apply with full force to your use of the Service.

17. Modification of Asset Shield Terms

Zoryxon may modify these Shield Terms from time to time. For material changes, Zoryxon will provide at least thirty (30) days' prior notice by email, in-platform notification, or other reasonable means. Non-material changes (including clarifications, typographical corrections, and changes required by law) may take effect immediately upon posting. On-chain protocol upgrades affecting the Asset Shield contracts are governed by separate upgrade timelock and multisig procedures documented in the Zoryxon security documentation.

18. Termination of Asset Shield Service

Zoryxon reserves the right to discontinue, suspend, or modify the Asset Shield front-end interfaces with notice where commercially reasonable. Discontinuation of front-end interfaces does not affect the operation of the underlying smart contracts, which remain accessible via direct interaction by any party with the applicable contract addresses and ABIs.

19. Severability

If any provision of these Shield Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, or, if modification is not possible, severed. The remaining provisions shall continue in full force and effect.

20. Governing Law and Dispute Resolution

These Shield Terms are governed by and construed in accordance with the laws of the State of Ohio, United States, without regard to its conflict-of-laws principles. Any dispute, claim, or controversy arising out of or relating to these Shield Terms or the Service shall be resolved through the mandatory arbitration and class-action waiver provisions set forth in the Terms of Service.

21. Contact

For questions regarding these Shield Terms, please contact us using the appropriate channel below.