Telegram users have relatively few familiar crypto entry points. The main alternatives are Wallet in Telegram (@wallet) and @CryptoBot, alongside general-purpose wallets used outside Telegram. Outruna is designed for users who want a focused multi-chain EVM wallet rather than a broad Telegram marketplace or a general dapp gateway. Wallet in Telegram now presents two different models: its Crypto Wallet is custodial, while its DeFi Account is self-custodial and focused on TON-ecosystem use cases. @CryptoBot is also a centralized custodial service. Custodial products can be convenient, but the provider controls access to the account and may apply withdrawal holds, regional restrictions, account locks, or additional KYC/compliance checks based on its policies and risk controls. Users should review the current terms of any custodial service and should not treat a custodial balance as equivalent to assets held in a wallet they control directly. Outruna uses Privy's embedded-wallet infrastructure. Privy describes these wallets as user-owned/self-custodial: its security architecture splits key material into encrypted shares across separate security boundaries and reconstructs it only temporarily when a signing operation is authorized. Depending on the configured execution environment, sensitive operations are handled in a trusted execution environment or on the user's device. Outruna does not expose a complete private key during normal wallet use, and users do not need to store a private key or mnemonic during standard onboarding. That reduces dapp-signing exposure, but it does not remove account, Privy infrastructure, smart-contract, or blockchain risk. Security Controls No general dapp connection: the wallet is not available as a browser-injected provider for arbitrary sites. Address screening: destination addresses use Rabby reputation data plus local risk data when available. Dangerous destinations require an explicit acknowledgement. Transaction screening: final transaction drafts are checked before sending. Forbidden transactions are blocked; warnings and dangerous transactions require acknowledgement. If Rabby is unavailable, withdrawals remain usable, so users must still review every destination and transaction. Transaction checks and simulation validation: supported withdrawals send the final transaction draft to Rabby's check_tx service before signing. The returned pass, warning, danger, or forbidden result controls whether the user can continue. Swap providers' simulation-error responses are also rejected before execution. Custom-token warnings: unknown or suspicious token contracts require extra review and acknowledgement. Privy embedded-wallet protection: the wallet is user-owned rather than an Outruna custodial balance. Privy splits key material into encrypted shares and only reconstructs it temporarily for authorized signing, so Outruna does not keep a complete user private key in the frontend during normal use. Gas safety: native gas is used when available. Gas Account use depends on Gas Account eligibility, service availability, and sufficient Gas Account balance. Transaction 2FA: users can optionally enable Privy MFA for wallet actions. In Outruna this protects transaction signing; Privy also applies MFA when the embedded-wallet key is used for signing messages, export, or recovery. TOTP works with Google Authenticator and compatible authenticator apps, and remains disabled until enrollment is completed. Encrypted P2P payout details: card or phone payout details are encrypted for the operator workflow. Signed builds: production builds generate and verify a manifest for emitted assets.

Outruna

crypto wallet, telegram wallet bot, telegram webapp

crypto wallet, telegram wallet bot, telegram webapp