
Custody
Binance runs it as an MPC wallet: the key is split and, per Binance, “never fully reconstructed on any single device or server”. Keys can’t be exported. Tozzecard never holds them.How the agent uses it
The agent drives the wallet through Binance’sbaw command-line tool, from our API server:
Signing in needs your confirmation in the Binance App. A session lasts up to 48 hours. When it ends, every decision is logged as blocked until you confirm again.
The address book is the guard
baw wallet send only sends to addresses in the wallet’s address book, and the address book can only be edited in the Binance App, not through baw. You add your card address and nothing else, so the agent can fill your card and can’t send anywhere else.
We tested it on mainnet: a send to an address outside the address book is refused by Binance with error 351703.