A privacy-focused cryptocurrency wallet ecosystem built on the Octra Network.
0xio is a comprehensive wallet solution that enables secure management of both public and private cryptocurrency transactions on Octra Network. The ecosystem includes a browser extension wallet, mobile applications, and developer tools for seamless dApp integration.
Status: Live on Chrome Web Store (v2.1.14)
The new 0xio Wallet is a robust, high-performance browser extension rebuilt from the ground up using React and Vite. It provides a secure, user-friendly interface for managing your Octra Network assets directly in your browser.
Features:
- Advanced Cryptography: Implements industry-standard BIP39 mnemonics and HD wallet derivation.
- Vault Architecture: Utilizes a single encrypted vault for all account storage, protected by AES-GCM with 900,000 PBKDF2 iterations.
- Modern Architecture: Built with React and Vite for faster load times and a responsive UI.
- Privacy First: Native support for public and private (encrypted) transactions.
- Multi-Wallet: Create and manage unlimited wallets with ease.
- dApp Ready: Seamless connectivity via the
@0xio/sdk. - Supply Chain Security: Protected against malicious npm packages using LavaMoat.
Install: Chrome Web Store
Tech Stack:
- Framework: React 18 + Vite
- Styling: TailwindCSS
- Cryptography: TweetNaCl (Ed25519), Web Crypto API (SHA-256, PBKDF2)
- State Management: React Context + Hooks
- Standard: Chrome Extension Manifest V3
Legacy Version: The previous Vanilla JavaScript version of the extension has been deprecated and open-sourced for educational purposes. You can find it here: Legacy 0xio Extension.
Status: In Development
Native mobile wallet for iOS and Android platforms.
Features:
- Multi-wallet management
- Public and private token transfers
- Bulk transaction support (Public & Private)
- Private token claiming for encrypted transfers
- Transaction history
- Secure encrypted storage
- QR code scanning
Tech Stack:
- React Native + Expo
- TypeScript
- React Navigation
- Secure Storage (expo-secure-store)
- Octra Network integration
Status: Published on npm
Official TypeScript/JavaScript SDK for integrating 0xio Wallet with decentralized applications.
Package: @0xio/sdk
Features:
- Seamless wallet connection
- Transaction management (public & private)
- Balance queries
- Event-driven architecture
- Full TypeScript support
- Framework agnostic (React, Vue, Svelte, Vanilla JS)
Installation:
npm install @0xio/sdkThe 0xio wallet implements a rigorous security model based on standard cryptographic primitives and hierarchical deterministic (HD) wallet specifications.
The wallet strictly adheres to the following standards to ensure compatibility and security:
- Mnemonic Generation (BIP39):
- Generates 128-bit entropy using the Web Crypto API.
- Produces a standard 12-word mnemonic phrase.
- Seed Derivation:
- Uses PBKDF2 with HMAC-SHA512 (2048 iterations) to derive the binary seed from the mnemonic.
- Hierarchical Deterministic (HD) Path:
- Follows a specific derivation path for the Octra network:
m/345'/0'/0'/0'/0'/0'/0'/0. - Indices represent: Purpose (345) / Coin / Network / Contract / Account / Token / Subnet / Index.
- Follows a specific derivation path for the Octra network:
- Signing Keys:
- Uses Ed25519 (Twisted Edwards curve) for high-speed, high-security digital signatures.
- Implemented via the
tweetnacllibrary.
- Address Generation:
- Public keys are hashed using SHA-256.
- The resulting hash is encoded using Base58 and prefixed with
oct.
Sensitive data is never stored in plain text. The wallet utilizes a "Vault" architecture:
- AES-GCM Encryption: All private keys and mnemonics are bundled into a single JSON object and encrypted using AES-GCM (Advanced Encryption Standard in Galois/Counter Mode).
- Key Wrapping: The encryption key for the vault is derived from the user's password using PBKDF2 (900,000 iterations) and a unique, randomly generated salt.
- Non-Custodial: Private keys never leave the user's device. They are encrypted at rest within the browser's local storage and only decrypted in memory when signing a transaction.
The wallet includes multiple layers of protection against common attack vectors:
- Password Rate Limiting: Progressive lockout after failed password attempts (30s, 60s, 120s, etc.) to prevent brute force attacks.
- Wallet Reset Confirmation: Users must type "DELETE MY WALLET" to confirm wallet deletion, preventing accidental data loss.
- Session Key Protection: Session keys are kept in memory only and never stored as exportable material.
- DApp Connection Expiry: Connected dApps automatically disconnect after 24 hours or when the wallet is locked.
- Message Origin Verification: All postMessage communications use strict origin checking instead of wildcards.
- Request Replay Prevention: Nonce-based verification prevents replay attacks on wallet requests.
- Automatic Migration: Seamless vault upgrades when updating from older versions, with backwards-compatible decryption.
| Repository | Description | Status |
|---|---|---|
| 0xio_wallet | React-based browser extension wallet | Live (v2.1.14) |
| 0xio_app | React Native mobile application | Development |
| 0xio_SDK | TypeScript SDK for dApp integration | Published on npm |
| 0xio_web | Marketing website and onboarding | Live at 0xio.xyz |
| Legacy | Archived Vanilla JS extension code | Archived |
┌──────────────────────────┐ ┌──────────────────────────┐
│ 0xio_wallet (Chrome) │ │ 0xio_app (Mobile) │
│ React + Vite + Tailwind │ │ React Native + TypeScript│
│ - HD Wallet (BIP39) │ │ - Multi-wallet Support │
│ - Ed25519 Signatures │ │ - Private Transfers │
│ - AES-GCM Vault │ │ - QR Code Scanner │
└───────────┬──────────────┘ └──────────┬───────────────┘
│ │
│ Extension API │ Direct Integration
│ │
└──────────┬───────────────────────┘
│
┌───────────▼──────────────────────┐
│ dApps (Web Applications) │
│ - React, Vue, Svelte, etc │
└───────────┬──────────────────────┘
│
│ SDK Integration
│
┌───────────▼──────────────────────┐
│ 0xio_SDK (npm) │
│ - TypeScript/JavaScript │
│ - Wallet Connection │
│ - Event Management │
└───────────┬──────────────────────┘
│
│ RPC/API Calls
│
┌───────────▼──────────────────────┐
│ Network Service Layer │
│ - Transaction Broadcasting │
│ - Balance Queries │
│ - Private Transfer Management │
└───────────┬──────────────────────┘
│
┌───────────▼──────────────────────┐
│ Octra Network │
│ - Consensus Layer │
│ - Smart Contracts │
│ - Encrypted Private Transfers │
└──────────────────────────────────┘
- Private token transfers using end-to-end encryption
- Encrypted data stored on-chain with ephemeral keys
- No transaction history leakage for private transfers
- Balance encryption/decryption
- Create unlimited wallets (current implementation limited at 5 wallets)
- Import existing wallets via private key or mnemonic
- Switch between wallets seamlessly
- Individual balance tracking per wallet
- Public Transfers: Standard blockchain transactions
- Private Transfers: Encrypted on-chain transfers
- Bulk Transfers: Send to multiple recipients at once
- Claim System: Claim private transfers
- Comprehensive SDK with TypeScript support
- Event-driven architecture
- Multi-framework compatibility
- Built-in error handling with retry logic
Browser Extension:
- Install the latest version from Chrome Web Store.
- Create a new wallet (generates a new BIP39 seed) or import your existing phrase.
- Start managing your Octra assets with the new React-powered interface.
Mobile App:
- Coming Soon to iOS and Android.
Integrate 0xio Wallet into your dApp:
npm install @0xio/sdkimport { createZeroXIOWallet } from '@0xio/sdk';
const wallet = await createZeroXIOWallet({
appName: 'My Awesome DApp',
autoConnect: true
});
await wallet.connect();| Component | Stack |
|---|---|
| Browser Extension | React, Vite, TailwindCSS, CRXJS |
| Cryptography | TweetNaCl (Ed25519), BIP39, PBKDF2, AES-GCM |
| Mobile App | React Native, Expo, TypeScript, AsyncStorage |
| SDK | TypeScript, Rollup, Jest |
| Blockchain | Octra Network |
- Browser Extension V2: Complete rewrite in React for better performance and maintainability.
- SDK Core (v2.0): Enhanced connection handling and strict typing.
- Stealth Addresses (RFC-001): Client-side disposable address layer.
- SDK v3 (Write Operations): Adding
signTransactionandbroadcastmethods. - Mobile Beta: Native iOS & Android apps with biometric security.
- Cross-Browser Support: Porting extension to Firefox & Edge.
- 0xio DEX: The first encrypted AMM for the Octra network.
- Website: 0xio.xyz
- X/Twitter: @0xio_xyz
- GitHub: @0xio-xyz
- Telegram: @Nullxgery
- Documentation: docs.0xio.xyz
- Email: team@0xio.xyz
- Issues: Report bugs via GitHub Issues
0xio Wallet (React/Vite) is Proprietary Software. Copyright © 2026 0xio. All Rights Reserved. Unauthorized copying, modification, distribution, or use of this software is strictly prohibited.
The Legacy 0xio Extension (located in the legacy/ directory) remains open-source under the MIT License. It is provided for educational and archival purposes only.
0xio Wallet is a proprietary software product developed and maintained by 0xio.
While designed exclusively for the Octra Network, 0xio is an independent entity and is not a subsidiary of the Octra Network Foundation. This software is provided "as is", without warranty of any kind. Users are responsible for the security of their recovery phrases and private keys.
Future Open Source Commitment: While the current codebase is proprietary to ensure integrity during our initial launch phase, we believe in the open-source ethos of Web3. We plan to open-source the v2.0 codebase once our security audits and feature stability phases are complete.