What is Fiat2Safe?

Fiat2Safe is a platform developed by BRX that allows you to swap your fiat currency (BRL) for cryptocurrency. You can deposit BRL using PIX, Brazil's instant payment system, and receive:

• EUR.e on the Gnosis Chain
• USDT on the Arbitrum Chain

Your swapped cryptocurrency is sent directly to:

• Your Gnosis Safe: A secure wallet that you control.
• A New Wallet Controlled by Your Email: If you don't have a wallet, we can create one for you that's controlled solely via your email address. Neither you nor we have access to the private key, ensuring maximum security.

How to Use Fiat2Safe

Follow these simple steps to swap your BRL for cryptocurrency using Fiat2Safe.

Step 1: Access the Fiat2Safe Platform

Visit our Fiat2Safe platform at https://x.kona.finance

Step 2: Start a New Swap

Complete the information required by the swap:

• The fiat currency you are depositing
• The blockchain in which you want to receive your crypto
• The asset that you want to receive in the selected chain
• The address of your Safe, or you can request to generate a wallet on the fly by entering your email address
• Your document type
• Your document number
• Your full name

Then enter the maximum slippage that you will accept:

Once all the information is completed, the estimated amount of tokens that you will receive will be displayed in the screen, along with an explanation of all fees and gas costs:

Press Continue when you are ready. A QR code will be displayed, which you can use to do a PIX in order to deposit the BRL.

You can also copy the QR string:

Once the deposit is done, you will be able to see the status of your operation:

Step 3: Log in

In case you want to return later and see a history of your operations, you can log in in 2 ways:

• Use your email address to see the operations related to the wallet created on the fly for you.
• Use your CPF and Safe Address to see the operations created with your own safe.

Step 4: See your operations related to your email generated wallet

By logging in with your email address you will access a dashboard from which you can see your operations, your wallet balances and manage your tokens, by using the Transfer or Approve forms.

After selecting an output blockchain, you will be able to see the balances of the chain's native asset and the supported output tokens.

You can use the Approve form to increase the allowance for a spender. As the wallet is controlled by your email address and you are already logged in, no signature is required. Once the Approve button is pressed, the transaction will be executed.

You can use the Transfer form to send tokens to any recipient.

Step 5: See your operations related to your self managed Safe

In this screen you can see a list of your operations

Wallet Security

At Fiat2Safe, we prioritize the security of your cryptocurrency assets. When you choose to create a new wallet using your email address, we generate it through Magic, a secure authentication and key management service. Here's how we ensure your wallet remains exclusively under your control.

Secure Wallet Creation with Magic

• No Private Keys Stored: Neither Magic nor Fiat2Safe stores or has access to your private keys. Your wallet's private key is generated and managed securely, ensuring that only you can access and control your funds.
• Email-Based Authentication: You control your wallet simply by logging in with your email address. There's no need to remember passwords or manage complex seed phrases.

How Magic Secures Your Wallet

Passwordless Identity Verification

• Time-Bound Tokens: When you log in, Magic sends a time-sensitive token to your email to establish a secure session. This token ensures that only the rightful email owner can access the wallet.

• Public-Private Key Pair Generation: Upon successful authentication, Magic generates a cryptographic key pair for your wallet:

  • Public Key: Acts as your wallet's address and identifier on the blockchain.
  • Private Key: Used to authorize transactions from your wallet.

Patented Delegated Key Management System (DKMS)

• Secure Key Management: Magic employs a patented DKMS (Patent US-11546321-B2) to securely manage your encrypted private keys.

• Encryption with AWS KMS: Your private key is encrypted using the Amazon Web Services Key Management Service (AWS KMS), leveraging industry-leading security practices.

Hardware Security Modules (HSMs)

• Unextractable Master Keys: User master keys are stored within AWS Hardware Security Modules (HSMs). These keys never leave the secure hardware environment, preventing unauthorized access.
• Secure Cryptographic Operations: All encryption and decryption occur within the HSMs, similar to how hardware wallets like Trezor or Ledger function, but securely managed in the cloud.

Protecting Your Private Key

• Encrypted Key Transfer: When you sign up, your private key is generated within a secure iframe on your device and encrypted before being stored.
• Direct AWS Interaction: Upon login, you receive a time-bound access token that allows your device to communicate directly with AWS to decrypt your private key—Magic and Fiat2Safe cannot intercept this process.
• No Single Point of Failure: Since the private key can only be decrypted with your credentials and the HSM-stored master key, the risk of key compromise is significantly reduced.

Why This Matters to You

• Exclusive Control: Only you can access and control your wallet and funds. Neither Fiat2Safe nor Magic can perform transactions on your behalf.
• Enhanced Security: By eliminating passwords and using advanced cryptographic methods, we reduce common security risks like phishing and keylogging.
• User-Friendly Experience: Managing your cryptocurrency becomes as simple as checking your email, without sacrificing security.

Additional Security Tips

• Protect Your Email Account: Since your wallet access is tied to your email, ensure your email account is secure by using strong passwords and enabling two-factor authentication (2FA).
• Stay Vigilant: Be cautious of phishing attempts. Always ensure you're interacting with official Fiat2Safe communications and websites.

Learn More

For more detailed information on Magic's security protocols, please refer to their Product Security Documentation.