LIVE
v1.0 · Released · foundation phase establishing zero-server security, analytics, and vault architecture
Foundation — Security, Analytics & Vault
0/0
▾
Foundation Milestone Achieved
What this proved: A zero-server, fully client-side security and analytics platform is viable. AES-256-GCM encryption, live XRPL connectivity, real-time fraud detection, and private wallet tooling all run locally in the browser. No backend custody. No user-data server. Every future layer builds from this foundation.
Authentication & Vault▾
✓
AES-256-GCM encrypted vault with authenticated ciphertext
Security✓
PBKDF2-HMAC-SHA256 · 150,000 iterations · unique salt per account
Security✓
3-step signup — Identity → Security → Sync Awareness
UX✓
Auto-lock after 30-min inactivity · session key cleared from RAM
Security✓
Cross-device vault sync via encrypted code + file export
Security✓
@handle / domain registration (local identity layer)
UXInspector & Forensic Analytics Foundation▾
✓
Security audit foundation — master key, regular key, flags, and SignerList interpretation
Security✓
Drain risk analysis foundation — auth-path review and suspicious outflow correlation
Security✓
Wash trading behavioral detection — composite signal model for non-organic DEX activity
Analytics✓
NFT trap and suspicious-offer detection — zero-value and interaction-risk patterns
Security✓
Composite risk score with finding-level penalty breakdown
Analytics✓
AMM / LP exposure review — pool participation and concentrated-risk context
DeFi✓
Transaction history analysis with Benford-style anomaly screening
Analytics✓
Known / notable address surfacing — flagged issuers, suspicious counterparties, and drainer context
SecurityWallet Management▾
✓
Generate wallets — Ed25519 / secp256k1
XRPL✓
Import from seed phrase (AES-encrypted in vault)
Security✓
Watch-only wallet support — inspect without exposing seed
XRPL✓
Reserve breakdown — current XRPL reserve model with base reserve, owner reserve, and available balance display
XRPL✓
DEX order tracking + inline cancel from wallet drawer
DeFi✓
NFT gallery per wallet with offer status display
XRPLPortfolio Analytics▾
✓
26-week on-chain activity heatmap
Analytics✓
XRP flow analysis — inflow / outflow / net
Analytics✓
Token allocation bars + profile metrics row
Analytics✓
Balance history sparklines per wallet
AnalyticsLive Stream & Infrastructure▾
✓
Real-time ledger stream — TPS, fee pressure, TX mix
XRPL✓
4-endpoint cycling + exponential-backoff auto-reconnect
XRPL✓
Mainnet / Testnet / Xahau network switching
XRPL✓
PWA + iOS Capacitor / TestFlight ready
iOS✓
Command palette (⌘K) — keyboard navigation
UX✓
5 visual themes + full iOS safe area support
UXACTIVE
v1.1 · Q1 2025 · depends on v1.0 foundation and focuses on evidence presentation, exportability, and forensic depth
Analytics Depth & Inspector Power
0/0
▾
Analytics Milestone
Goal: Move from snapshot analytics to time-aware intelligence. Users should see how risk profiles change over time, export findings, compare addresses side-by-side, and read stronger evidence-linked reports. Sub-milestones: date range picker → address comparison → risk trend line → report export → forensic-suite expansion.
Current Build Focus
Current execution track: side-by-side account comparison, forensic-suite convergence, and
evidence-linked reporting have shipped as part of the expanded forensic direction in White Paper v3.1.
Since then, the Inspector went through a full plain-language pass — every section now leads with an
honest, in-plain-terms summary before the raw evidence, gated behind Simple/Analyst mode — plus a
rebuilt Wash Trading panel (independent Execution/Spoofing/Market-Making verdicts, a reusable Trading
Relationship drawer, Relationships Worth Reviewing), a Data Quality strip, and an Important Events
timeline cross-referencing security changes, drain episodes, and fee spikes. Date range picker, risk
trend visibility, report export, share-as-link, and address book remain the open items for this phase.
Security Analytics Upgrades▾
✓
Date range picker for time-series charts (7d / 30d / 90d / all time) — Portfolio Value, per-wallet Balance History, and the Inspector's Risk Score Trend chart
Analytics✓
Compare two addresses side-by-side in Inspector — risk diff view
Security✓
Risk score trend line — how has this address changed over inspections, with a real line chart once an address has been inspected 2+ times
Security✓
Inspector export to PDF — shareable investigation report (print-styled popup with a working "Print / Save as PDF" button)
Security✓
Expanded forensic suite convergence — entropy, Zipf, timing, and lead-lag analytics
Analytics✓
Full investigation report narrative with evidence-linked findings and recommendations
Security✓
Share inspection as link — a URL fragment that auto-opens the exact inspection, whether the visitor already has a session or needs to sign in first
Analytics✓
Address book — save labels for any inspected address, from the Inspector's relationship drawer or the Send modal, with a Settings card to view/remove entries
Analytics✓
Export analytics + inspection data as CSV — one row per finding across every module
Analytics✓
Portfolio value line chart across time — as-of-joins every mainnet wallet's balance history into one combined series, excluding testnet balances
Analytics✓
Flow Motifs — round-trip, AMM round-trip, and exchange round-trip pattern detection
Security✓
Drain Risk & Fund Flow Tracer merged into one section — shared plain-English summary, Before/During/After balance snapshot, per-episode destination breakdown cross-referenced against lifetime top destinations
Security✓
AMM Auction & Governance forensic suite — AMMVote/AMMBid separation, dominance history, LP economics comparison
Analytics✓
Who Is Connected + verified-vs-inferred network map — mirror-cluster overlay distinguishing verified direct transfers from inferred common ownership
Security✓
Independent Wash Trading verdicts — Execution, Spoofing, and Market-Making scored and shown separately, each with a real "Why This Is Flagged" evidence panel instead of one blended score
Security✓
Trading Relationship drawer — click any counterparty from the Network Map, Wash Trading, Inbound Flow, AMM, or NFT views for full gross/net/reciprocity detail
Security✓
Relationships Worth Reviewing — round-trip counterparties ranked by evidence strength (Strong / Moderate / Weak), each opening the Trading Relationship drawer
Security✓
Inbound Flow plain-language summary — funding-source concentration, recurring vs one-time funders, real first/last funding dates
Analytics✓
Forensic Suite 4-layer plain-language translation — Benford's, Entropy, Zipf's, Time Series, and Offer/Flow Coupling each surface a real, distinct status badge instead of staying blank
Analytics✓
Volume Concentration plain-language summary — HHI/Gini concentration translated into a plain-English read before the raw stats
Analytics✓
Honest N/A vs Insufficient Data vs Not Detected labeling across every forensic engine and verdict card — a module never claims "normal" when it lacks the data to judge
Security✓
Data Quality strip — history completeness, execution-reconstruction %, holder-history and AMM coverage shown at a glance
Analytics✓
Important Events Timeline — security changes, drain episodes, and fee spikes merged into one chronological view with cross-referenced "Related" evidence chips
Security✓
Simple/Analyst mode applied platform-wide — every Inspector section leads with a plain-language "In plain terms" summary, with raw evidence gated behind Advanced mode
UXUX & Accessibility▾
✓
Onboarding walkthrough — first-launch guided tour (4-step spotlight tour after signup/sign-in)
UX✓
Loading skeleton screens — content-shaped placeholders (wallet drawer tabs, Inspector report)
UX✓
Haptic feedback on key security actions (Emergency Sweep, Revoke Key, Clear Signer List, Rotate Key) via the standard Vibration API — real on Android, a safe no-op on iOS Safari (no WebKit support)
UXReal native haptics on iOS via @capacitor/haptics — this repo already has a working Capacitor iOS shell (ios/), but the plugin isn't installed yet and wiring it needs `npx cap sync` from an actual macOS/Xcode environment to verify
iOSFull ARIA label coverage + keyboard navigation
UX✓
High-contrast theme — 5th theme option (pure black/white/yellow palette, boosted card/modal/input/nav borders, strong focus-visible outline); covers the highest-traffic shared surfaces rather than the ~1,000 individually-hardcoded low-opacity colors across every stylesheet
UX✓
Reduced-motion mode — Settings toggle (System/Reduce/Full) plus automatic OS-level detection, app-wide
UXCOMING SOON
v1.2 · Q2 2025 · depends on v1.1 comparison/reporting and signing-flow hardening
Wallet Transaction Capabilities
0/0
▾
Wallet Milestone — Detect & Fix in One Tool
Goal: Close the gap between detection and action. A user who finds a suspicious regular key should revoke it right here — without switching wallets. Detection without action is notification theater. Sub-milestones: regular key revoke → emergency sweep → send/receive → trustline management.
Security Remediation▾
✓
Revoke regular key — available from a new Security Actions modal on each wallet card, signs via SetRegularKey with no key field
Security✓
Inspector regular-key findings show a real "Open Security Actions" button when the inspected address is one of the user's own signable wallets
Security✓
Rotate regular key — 3-step flow (generate → confirm backup → sign); the new seed is shown once and never stored by this app, and "Continue" stays disabled until the user explicitly confirms they've saved it
Security✓
Clear signer list — signs SignerListSet with quorum 0 to remove it entirely (deliberately whole-list, not per-entry — this tool can't tell which signers were legitimately authorized)
SecurityRe-enable master key when disabled without verified backup
Security✓
Emergency fund sweep — move all available balance (minus reserve/fee) to a clean address, live-computed from real account state
SecuritySend & Receive▾
Full Send XRP flow with destination tag auto-detection
XRPLToken (IOU) send — signed in-browser
XRPLQR code scanner for address input (camera API)
iOSTransaction preview with fee estimate + risk check before signing
SecurityReceive page with QR code generation
UXTrustline Management▾
Set trustline UI — issuer + currency + limit with issuer risk preview
XRPLRemove trustline when balance is zero — with freeze/ripple warnings
SecurityEscrow create / finish / cancel UI
XRPLCOMING SOON
v1.3 – v1.4 · Q3 2025 · depends on v1.2 transaction execution and trustline tooling
DEX Trading & NFT Management
0/0
▾
DEX Milestone
Goal: See a suspicious token, check DEX depth, and manage your position without leaving NaluLF. Sub-milestones: order-book viewer → place offer UI → AMM swap → OHLCV charts → NFT mint/burn/offer flows.
DEX Order Management▾
Place new DEX offers — buy/sell UI with pair selection
DeFiOrder book viewer for any currency pair
DeFiOHLCV candle charts for any XRPL trading pair
AnalyticsAMM single-asset swap UI
DeFiLP position P&L + impermanent loss calculator
DeFiNFT Management▾
Mint new NFT — URI, taxon, transfer fee, flags
XRPLBurn, transfer, create/accept offers
XRPLCollection view — group by taxon or issuer
XRPLRarity viewer — trait breakdown from metadata
AnalyticsPLANNED
v2.0 · Q1 2026 · depends on mature transaction tooling and stronger evidence export in v1.x
Identity, DID & Forensic Analytics
0/0
▾
Sovereignty Milestone
Goal: True self-sovereign identity on XRPL and a more rigorous forensic layer. Your handle, your DID, your proofs, your signatures, your evidence trail. Sub-milestones: message signing → DID registration → stronger anomaly testing → counterparty scoring → multisig UI → tax export.
Decentralized Identity▾
On-chain DID registration linking @handle to XRPL address
XRPLSign arbitrary messages — proof of address ownership
SecurityEnd-to-end encrypted address-to-address messaging
SecurityForensic Analytics▾
Benford χ² / statistical-quality anomaly testing and stronger sample controls
SecurityCounterparty risk scoring — rate wallets you transact with most
SecurityWatchlist alerts on risk-score threshold changes
AnalyticsMulti-wallet aggregate P&L with cost basis tracking
AnalyticsTax report export — CSV with acquisition cost + disposal proceeds
Analytics✓
Distribution & Market Flow — traces an issuer's largest direct token recipients forward for synchronized selling and proceeds consolidation, an on-demand "🔍 Analyze Distribution & Market Flow" panel in the Inspector's Issuer group (phase 1 of 4 — see the remaining phases below)
Security✓
Distribution Cohort & Overlap Matrix — a real "seller" cohort (gross amount sold, zero extra RPC calls), an overlap matrix across early/top/LP/seller holders, and hop-2 forward-tracing on each Distribution & Market Flow cohort wallet
Security✓
Market Setup Timeline — chronological distribution → hop-2 forward → selling → proceeds event view inside Distribution & Market Flow (liquidity/AMM-deposit timing not yet included)
Security✓
Issuer Ecosystem multi-hop graph — a real 2-ring radial graph (issuer → direct recipients → hop-2 forwards/proceeds destinations) with 3 distinctly-colored edge types, inside Distribution & Market Flow
SecurityIssuer Ecosystem graph: switchable relationship-type layers (Distribution/Funding/Trading/Liquidity/Proceeds/All) and a 3rd hop — deliberately scoped out of the first version above
AnalyticsMulti-Signature▾
Create and manage SignerLists via UI
SecurityMulti-sig transaction proposal — propose, co-sign, submit
SecurityOffline signing — export unsigned blob, sign offline, re-import
SecurityPLANNED
v2.1 · Q2–Q3 2026 · depends on identity, evidence export, and maturing account-level analytics
Payment Channels & Social Layer
0/0
▾
Streaming Payments Milestone
Goal: Add payment-channel management and a lightweight social/discovery layer on top of the security foundation. This supports real-time payment workflows and later agent automation. Sub-milestones: channel open/close → claim signing → streaming UI → public profile discovery.
Payment Channels▾
Open payment channel to any address
XRPLChannel dashboard — balance, capacity, expiry
XRPLCreate off-chain payment claims — signed channel claims
SecurityClose / settle channel UI
XRPLProfile Discovery▾
Public profile page — shareable URL for @handle
UXProfile QR code — handle + address for easy sharing
XRPLSocial graph — follow XRPL addresses, see recent activity
AnalyticsFUTURE
v2.3 · Q4 2026 · depends on delivery of node-backed signal infrastructure and sustained analytics demand
NaluLF Node Infrastructure
0/0
▾
Infrastructure Milestone
Goal: Own the data pipeline. A private rippled node removes shallow-history limits, enables monitoring at scale, and supplies the live signal layer that later AI agents depend on. The node is infrastructure, not custody — keys never touch it. Sub-milestones: node live → health dashboard → full history API → webhooks → fee oracle.
Private XRPL Node▾
Self-hosted rippled node with private WebSocket endpoint (wss://node.nalulf.io)
InfraNode health dashboard — ledger lag, peer count, sync status in-app
InfraAuto fallback to public endpoints if node is unreachable
InfraReduced submission latency — bypass public relay queues
XRPLStreaming & Analytics API▾
Server-side account subscriptions — thousands of wallets simultaneously
AnalyticsWebhook delivery — push ledger events to user-configured URLs
InfraHistorical replay API — stream past ledger ranges for backtesting
AnalyticsDEX order-book depth cache — real-time snapshots per pair
XRPLFee oracle — optimal fee prediction from congestion history
AnalyticsFull paginated account_tx — no 200-tx browser cap
AnalyticsFUTURE
v3.0 · Q1 2027 · depends on node feeds, local execution guardrails, and stable transaction infrastructure
AI Agent & Dynamic Trading Intelligence
0/0
▾
Intelligence Milestone
Goal: The platform stops being purely reactive and becomes proactive. AI summarizes on-chain risk in plain English. Bots act on signals the analytics layer already produces. Agents respond to XRPL events automatically. The AI advises. The local agent executes. The user authorizes. No key material ever touches the AI model.
AI Portfolio Advisor▾
Natural-language chat — “What’s my biggest risk exposure?”
AIAI anomaly summaries — translate risk-score changes into plain English
AIAutomated due-diligence reports — paste address → get structured risk summary
SecurityMarket context overlay — AI narrates performance vs XRPL conditions
AITax estimate helper — AI-guided cost-basis Q&A → CSV export prep
AIDynamic Trading Bot Builder▾
Visual strategy builder — drag-and-drop condition blocks (price, balance, time)
TradingBot templates — DCA, Grid Bot, Stop-Loss, Take-Profit, Rebalancer
TradingCustom scripting layer — JS sandbox for arbitrary strategy logic
TradingBacktesting engine — run strategy against historical DEX OHLCV data
AnalyticsSimulation / paper-trade mode — live signals, no real transaction submission
TradingLive deployment — bot signs locally (keys never leave device)
SecurityBot dashboard — P&L, fill rate, signal log, kill switch per bot
TradingAI Agent Automation▾
Workflow chains — “If XRP drops 10%, cancel offers then DCA”
AINatural-language strategy creation → AI generates condition blocks
AIRisk-guard layer — hard stops on drawdown or reserve breach
SecurityOn-chain event triggers — agent reacts to real-time XRPL events
XRPLAgent audit log — immutable local record of every action + outcome
SecurityAgent Scaling Infrastructure▾
Agent runtime — Web Worker so bots run without UI open
InfraRate-aware submission — queue transactions to avoid fee spikes
InfraNode-backed signal feeds — sub-second latency via NaluLF node
InfraMulti-agent isolation — each bot sandboxed with wallet-level permissions
SecurityOffline resilience — agents persist to encrypted vault, resume after restart
InfraFUTURE
v3.1 · 2027+ · depends on mature agent/runtime systems and stable cross-network abstractions
Cross-Chain, Hooks & Hardware Wallets
0/0
▾
Ecosystem Milestone
Goal: Expand beyond XRPL Mainnet — bridge outward, support Xahau Hooks, and enable hardware-wallet signing for stronger key security. Sub-milestones: Ledger WebHID → Trezor → air-gap QR → XRPL↔ETH bridge → Hooks UI.
Cross-Chain & Bridges▾
XRPL ↔ Ethereum bridge integration
DeFiXahau Hooks transaction type support + Hook-aware wallet mode
XRPLDeploy and manage Hooks from within the UI
XRPLHardware Wallet Integration▾
Ledger hardware-wallet signing via WebHID / WebUSB
SecurityTrezor signing integration
SecurityAir-gapped QR signing workflow for offline machines
SecurityNo features match your filter.