DefiGuardian

DeFiGuardian adds social recovery to Telegram’s self-custodial DeFi Wallet.

Inside a Telegram Mini App, a user’s 24-word recovery phrase is processed locally and split into three shares. Any two shares can reconstruct the original phrase.

Each guardian receives one share, ideally through Telegram Secret Chat. No wallet connection, blockchain access, database, backend, account, or cloud storage is required. Once the static app loads, all validation, encryption-grade randomness, share creation, recovery, and clipboard actions happen entirely on the user’s device.

DeFiGuardian is a static Telegram Mini App built with Vite, strict TypeScript, vanilla HTML/CSS, and no backend. Telegram and BotFather are used only to launch the app from the bot profile; the Mini App does not use the Telegram JavaScript bridge, read user data, or send secrets back to a bot. We validate and convert the English 24-word BIP-39 phrase into its original 32-byte entropy using @scure/bip39. That entropy is split into a fixed one-group 2-of-3 SLIP-39 setup, producing three standard 33-word shares. Recovery combines exactly two shares, restores the entropy, and recreates the original 24-word phrase. All crypto, validation, share generation, recovery, and clipboard writes happen locally after the static files load. There is no database, wallet connection, blockchain call, analytics, storage, API, or runtime network request. The app is hosted as static assets and tested with Vitest plus Playwright, including browser checks for SLIP-39 recovery, secure randomness, and the full split/recover flow.