Practical Architectural Lexicon
The Luno Wallet Safety Library Glossary is an open reference index designed to demystify technical terminology across decentralized ledgers, digital asset custody, consensus mechanisms, and key management.
1. Key Storage & Cryptographic Fundamentals
Private Key
A secret 256-bit number mathematically paired with your public address. In digital custody, possessing the private key grants exclusive authority to sign transactions and spend associated digital assets. Private keys must never be shared, photographed, or entered into unverified web applications.
Seed Phrase (Mnemonic Phrase / BIP-39)
A human-readable sequence of 12, 18, or 24 words generated from a standardized dictionary of 2,048 words (Bitcoin Improvement Proposal 39). The seed phrase represents the root cryptographic entropy from which all master private keys, public addresses, and extended public keys (xPubs) are deterministically derived.
BIP-39 Passphrase (“The 25th Word”)
An optional alphanumeric string added on top of your standard 12 or 24-word seed phrase. The passphrase creates an entirely separate, mathematically distinct set of wallet addresses. It provides vital protection against physical theft or extortion by allowing you to maintain a decoy account under the primary seed while keeping the main balance protected under the passphrase.
Derivation Path
The specific mathematical standard (such as BIP-44, BIP-84, or chain-specific paths like m/44'/501'/0'/0') used by wallet software to systematically generate account addresses from the master seed.
2. Hardware Isolation & Wallet Paradigms
Cold Storage (Air-Gapped Wallet)
A security methodology where cryptographic private keys are generated and stored on a dedicated physical device that has never connected—and will never connect—to the internet or local networks. Communication occurs solely through optical QR codes or offline microSD memory cards.
Secure Element (SE Chip)
A tamper-resistant microchip rated under high Common Criteria standards (such as EAL5+ or EAL6+) designed to protect private keys against sophisticated physical attacks, including micro-probing, voltage glitching, and side-channel electromagnetic analysis.
Hot Wallet
A software wallet application running on an internet-connected operating system (such as a browser extension, desktop app, or smartphone operating system). While convenient for frequent transactions, hot wallets are exposed to operating system malware, keyloggers, and malicious browser extensions.
Blind Signing
The risky practice of approving a cryptographic transaction payload on a hardware device without the device screen clearly displaying the human-readable transaction parameters (such as recipient address, token amount, contract interaction method, and spending allowance limits).
3. Network Consensus, Validators & Staking
Proof-of-Stake (PoS) Consensus
A distributed consensus mechanism where network validators are selected to propose and confirm new ledger blocks based on the volume of native tokens bonded or delegated to them as economic collateral.
Validator Node
A high-performance computing server responsible for running network node software, verifying smart contract state changes, participating in consensus voting rounds, and appending valid blocks to the decentralized ledger.
Non-Custodial Delegation (Staking)
The process by which an asset holder assigns their token voting weight to a chosen validator without transferring ownership or custody of their private keys. The tokens remain locked or bonded under the user’s sovereign cryptographic address.
Slashing
An automated protocol penalty enforced on a validator (and by extension, its delegators) for malicious actions or protocol violations, such as double-signing blocks, proposing conflicting blocks, or suffering prolonged downtime. Slashing burns or confiscates a predetermined percentage of the staked collateral.
4. Threat Vectors & Defense Concepts
Smart Contract Token Approval (Allowance)
A permission granted by a token holder to a decentralized smart contract allowing that contract to transfer a specified quantity of tokens on the user’s behalf. Malicious decentralized apps exploit unlimited approvals to drain user wallets at a future date.
Address Poisoning
A social engineering attack where a scammer generates a vanity address that matches the first and last few characters of an address you frequently send funds to, then sends a dust transaction to pollute your transaction history in hopes that you copy-paste the attacker’s address from your history.
Shamir’s Secret Sharing (SLIP-0039)
A mathematical algorithm that splits a cryptographic master seed into M distinct shares, requiring a predetermined threshold (N of M) to reconstruct the original master key.
Need Practical Guidance Applying These Concepts?
Understanding definitions is only the first step. If you want hands-on assistance configuring hardware isolation, verifying non-custodial staking delegations, or conducting an allowance audit, explore our tailored sessions.