Products

One principle, four products.

Hold your own keys, and let the chain enforce the rules — not a company, not a support desk, not a promise. One is live in the MetaMask directory today, one is on devnet heading into audit, and two are in active development — each described here as it actually stands.

PENGY

Live on devnet · audit underway

A self-custodial Solana wallet built for people who would be ruined by losing their funds.

Every wallet on the market treats the recovery phrase as absolute proof of ownership. Copy it and you own the money. PENGY breaks that assumption: the vault is an on-chain program that will not release funds unless three independent factors sign together — the seed, a password-derived key held nowhere but in your head, and a device registered to the vault. An attacker with your phrase gets an empty room.

Around that core sit the protections that matter when things go badly. Spending limits the chain enforces on your behalf. A duress password that looks and behaves exactly like the real one, but silently alerts the people you nominated, with the time and your location. A dead man's switch that passes funds to a beneficiary if you stop checking in. A post-quantum authorization layer, because seed phrases outlive the cryptography that protects them.

The vault program is deployed to Solana devnet and its security properties are proven by six re-runnable on-chain tests: a seed-only attacker is rejected, an unregistered device is rejected, an unsigned device is rejected, the daily limit holds, and a duress withdrawal emits its silent alert. An independent security review returned zero critical and zero high findings. A full third-party audit is under way; mainnet follows it.

  • Three-factor on-chain vault — seed, password-derived key, registered device
  • Duress password that alerts emergency contacts with time and location
  • Chain-enforced daily spending limits and withdrawal delays
  • Dead man's switch with a permissionless executor
  • Post-quantum WOTS+ authorization on every vault exit
  • In-app swaps at 0.75%, falling to 0.08% for the heaviest traders

Self-custodial throughout. Excane cannot move, freeze or recover a user's funds, and holds no key that could.

Chain
Solana
Platform
Android, iOS to follow
Status
Devnet, audit underway
Security review
0 critical · 0 high
Test suite
450+ passing
On-chain proofs
6 of 6 passing
Custody
User only

Nexy

In development

A social network where your account is a wallet, and what you say is backed by what you hold.

Crypto conversation happens on platforms that know nothing about crypto. Anyone can claim a position, a win, or a bag; nobody can check. Nexy starts from the opposite end: you sign in with your wallet, and your profile shows what that wallet actually contains — holdings, and gains and losses computed from live prices rather than screenshots.

That single fact changes the room. Groups can be gated by what someone genuinely holds instead of who invited them, from token communities that create themselves around a coin to custom rooms with rules like a minimum balance. Verification stops meaning a document upload and starts meaning a proof anyone can check on-chain. Paying someone is a transfer between profiles rather than a detour through an exchange, and messaging is part of the product rather than a link to somewhere else.

The first version is deliberately narrow: wallet profiles, a ranked feed, threaded posts, token-gated and rule-based groups, profile-to-profile payments, and hardware-backed verification for Solana Mobile owners. Direct messages, media sharing and document-based identity checks come after that, in that order.

  • Sign in with your wallet — no email, no password
  • Profiles showing real holdings and performance
  • Groups gated by tokens held or on-chain rules
  • Payments between profiles in a tap
  • Verification proven on-chain instead of by ID upload

Name provisional. Nexy is in active development and is not open to users yet.

Chain
Solana
Identity
Wallet signature
Stage
In development
First cohort
Solana Mobile owners
Messaging
Planned after v1

The exchange

In development

A decentralised exchange and launchpad designed so that rug pulls stop being the default outcome.

On most launch venues, the economics reward the wrong people. A team can mint a token, seed a pool, take the buying pressure and walk away within an hour, and the venue earns its fee either way. Retail carries the loss and the venue carries none of it.

Our exchange is being built the other way round. Listing conditions are enforced by the contract rather than promised in a Telegram group, and the launchpad screens projects before they reach a single buyer instead of after the complaints arrive. Fees sit below the venues traders use today, because the point is to be the cheapest honest place to trade rather than the most profitable place to list.

It is early. What is settled is the shape: anti-rug conditions at the protocol level, a vetted launchpad, lower fees than the incumbents, and the same fee-tier ladder PENGY uses, so activity anywhere in the ecosystem earns a discount everywhere in it.

  • Launch conditions enforced on-chain, not by trust
  • Launchpad that vets projects before listing
  • Fees below the venues traders use today
  • Shared fee tiers across every Excane product

Early stage. Design is settled in outline; the details will change as it is built.

Chain
Solana
Type
DEX + launchpad
Stage
In development
Custody
User only

Chain Guardian

Live · MetaMask Snaps directory

An approved MetaMask Snap that stops you sending crypto to the wrong blockchain.

One of the oldest ways to lose crypto has nothing to do with attackers: paste an address from the wrong network, confirm, and the funds are gone forever. Wallet security tools scan for malice — almost none of them scan for this.

Chain Guardian does. It watches every transaction in MetaMask and checks the destination address against the network you are on. A Solana address while you're on Ethereum, a contract that exists on Polygon but not on the chain you've selected — you get a clear warning before you confirm, with bridge suggestions when what you actually wanted was a cross-chain transfer.

It is approved and listed on the official MetaMask Snaps directory, free, and fully open source. It recognises address formats across 16 blockchain ecosystems and fingerprints activity across 11 EVM chains to catch the subtler wrong-chain mistakes a format check alone would miss.

  • Approved and listed on the MetaMask Snaps directory
  • Checks every transaction automatically — no configuration
  • 16 ecosystems recognised, 11 EVM chains fingerprinted live
  • Free and open source

The same protection is being built directly into PENGY's send flow, and comes to every Excane product as we expand across chains.

Platform
MetaMask Snap
Status
Live, approved
Ecosystems
16
Price
Free
Source
Open

Building one of these with us?

We work with investors, security researchers and Solana teams. Tell us which part interests you.