The Three Address Protocol

• Vault

  Ice-cold

  Ideally a SAFE with hardware-wallet signers, or a hardware wallet.

  Holds

  The NFTs you are not trading

  Connects to

  Nothing, ever

  • Never connect it to any site or app, not even 6529.
  • Only transfer NFTs in and out.
  • Never mint from it. If you mint from it, it is not a vault.
  • Let a Delegation Manager sign for it on 6529, so it never has to.

• Transaction wallet

  Warm

  A hardware wallet.

  Holds

  NFTs you are buying, selling or trading

  Connects to

  Recognized marketplaces only

  • Only connect it to marketplaces you recognize.
  • Once you buy, move the NFT to your vault.
  • On 6529, make it your vault's Delegation Manager, so the vault never signs.

• Social wallet

  Hot

  Any wallet app. This is your hot wallet; older guides call it the minting wallet.

  Holds

  No NFTs, only a little ETH

  Connects to

  6529, mints and everything else

  • Use it for everything else: signing in to 6529, voting, posting and minting anywhere.
  • Once you mint, move the NFT to your vault or transaction wallet.
  • Never keep NFTs in it. If it is ever compromised, your NFTs are not there.

• Retire it, keep its TDH

  Some addresses should not be used again: an old hot wallet that was exposed, or a vault whose address became public. Stop using it, and combine it with your other wallets so its TDH keeps counting.

  Wallet limits are loading from the selected backend. Check Guided Setup if settings are unavailable.

• Creators

  Create new work from a dedicated hardware-wallet address, and protect it as carefully as your vault.

• A hardware wallet protects you from malware

  Your keys never touch your computer, so malware on it cannot steal them. But if you connect it to a drainer and approve the request, it signs.

• TAP protects you from drainers

  The wallet that holds your NFTs never connects to a link, a mint or a new site, so a drainer never gets the chance to ask.

Both together is best.

• Combine your wallets

  Your wallets count as one collector: TDH adds up, sets count across wallets and you have one profile. Any of them can sign in, so your vault never has to.

  Start guided setup

• Appoint a Delegation Manager

  Your vault signs once to make your transaction wallet its Delegation Manager. From then on, the manager registers everything for the vault.

  Appoint a manager

• Mint with your vault's eligibility

  A minting delegation lets your social wallet mint with your vault's eligibility. The vault never connects.

  Register a delegation

• Airdrops land in your vault

  With no delegation, airdrops go to the wallet with the most TDH. That is usually your vault.

  See the setup steps

For the technically curious: these are public records in the NFTDelegation contract. Combining is a consolidation (use case 999), a Delegation Manager is use case 998, a minting delegation is use case 2 and an airdrop delegation is use case 3.

• A Delegation Manager cannot move your NFTs, but it can register anything in your vault's name: combine it with another wallet, redirect its minting and airdrops, set its primary address and appoint more managers. It can also revoke the vault's entries. Make it a hardware wallet.
• Revoking a manager does not undo what it registered. Review those entries and revoke them too.
• The contract never enforces expiry dates. An expiry date is only respected by apps that check it; the record itself stays until it is revoked. A manager's expiry date is ignored entirely.
• Your vault can lock consolidation for Any Collection. Then no wallet can be linked to it, not even with a stolen manager key, and its manager cannot unlock it. The vault has to unlock before you add a wallet.
• Every combined wallet can sign in as your profile, including your social wallet. It still holds no NFTs.
• If your vault delegates "All" to another wallet, airdrops follow that delegation unless an "Airdrop" delegation points at the vault.