Known limitations
Honest boundaries of the Protocol, the Bloxchain Platform and this documentation as they stand today.
Protocol
Audit scope
The Nethermind NM_0828 audit covers the core framework library at one commit, named in the report. It does not track later releases on its own, so compare that commit against the version you are running. Templates, examples, the SDK, your extensions and unaudited forks are outside it. See Audit status.
Official accounts are not upgradeable
The official factory, BasicFactory (and the Platform's Deploy account), creates EIP-1167 clones fixed to the BasicAccount template. Logic cannot be changed in place.
Owner is the deploying wallet
The official factory mints an account only for the wallet that sends the deploy. You cannot mint an account for another owner. Broadcaster and recovery are separate addresses you choose.
Deploy from a regular wallet
A deploy uses about 16.16M gas. Networks that apply EIP-7825 cap one transaction at 16,777,216 gas, so only a direct call from a regular wallet (EOA) fits. A Safe, an ERC-4337 smart account, a forwarder or a multicall cannot be relied on to reach the factory. Relief is expected from a future network upgrade (Glamsterdam); there is no date. See Official mint rules.
Custom upgradeable deploys
Initializer-based contracts can sit behind a UUPS or transparent proxy if you build your own factory. Proxy admin and storage layout are your responsibility. See Immutable vs upgradeable.
Migration instead of upgrade
New logic means a new account, a policy rebuild, governed asset moves and updated allowlists. See Recovery and incidents.
Signed paths skip the time lock
Signed approval and One signature execute as soon as a broadcaster submits them; the signature is the authorisation. Only Delayed release waits.
No global signature revocation
A signed but unsubmitted payload stays valid until its deadline or until the signer's nonce is consumed. See Meta-transactions.
Gas
Governed flows cost more gas than a plain wallet transfer; users pay it from their own wallet.
Composability
Contracts you allowlist bring their own risk surface.
Bloxchain Platform
Alpha, testnet only
Alpha · Testnet · Local-first. Sepolia (chain 11155111) only. Ethereum mainnet is coming soon. Use test funds.
No custody, no key recovery
Bloxchain never holds a key and cannot recover one you lose. The Recovery role is your fallback; set it. See Recovery and incidents.
Local-first data lives on this device
Your account list, names, custom networks and stored signed payloads are in this browser only. Clearing site data removes them. Bloxchain keeps no copy; the export from Settings → Backup is the only copy. See Backup and restore.
Sign-in needs early access
Sign in if you have early access. Otherwise join the waitlist from the same dialog. The Free path needs no account and is open to everyone, so nothing on this device depends on signing in.
Organizations are paid
Shared account lists, member addresses, members and roles and billing exist only in a Pro, Team or Enterprise organization. An organization that has not completed checkout is Checkout required and shows no accounts. See Organizations and billing.
Relay is optional
The Bloxchain broadcaster needs sign-in and is not promised in every environment. Without it, a wallet holding the Broadcaster role submits signed payloads from Approvals.
Signed files are bearer instruments
Anyone who receives a .bloxmeta.json and can submit may broadcast it until it expires or is used. Share it like a signed cheque. See Signed files.
Presets do not pre-configure policy
Every preset on Discover deploys the same governed account, which lands as a Vault. Actions, roles, gates and allowlists are configured afterwards.
Gates are permanent
Once granted to a role, a gate cannot be turned off. Delete the custom role to clear its gates; system-role gates stay on.
Reference prices are indicative
The Value column in Assets comes from a third-party price feed and resolves on Ethereum and Arbitrum One only. Everywhere else, Sepolia included, it is blank.
Watched addresses
Watched addresses and alerts need an organization on Pro. They cover Ethereum and Arbitrum One mainnet only, with a cap per organization shared by its members.
Mobile
Sharing signed files from a phone is not documented as supported.
Documentation
Protocol pages under Protocol describe the pinned commit listed on Releases and compatibility. Newer tags may add behaviour before the pin advances.
The Platform ships continuously; a screen may change before its page does. The Changelog records documentation updates.
Related
Last updated
Was this helpful?