🔐 SantaFi - Verified Source Code

This repository contains verified wallet integration code for SantaFi - AI-powered Christmas PFP Studio on Solana.

⚠️ Important Notice

This is a security-focused repository containing only the wallet and payment integration code for transparency and community auditing.

Looking for:

• 🎨 Product features & tutorials? → Visit santafi.xyz
• 📚 Full documentation? → Coming soon
• 🗺️ Roadmap? → Follow @SantaFiXYZ

---

🎯 What's in This Repository

This repo contains verified, sanitized code for:

✅ Wallet Integration

• Solana wallet connection logic
• Wallet adapter configuration
• Connection state management

✅ Payment Handler

• SOL transfer logic
• Transaction signing flow
• Credit purchase system

✅ Security Documentation

• Architecture overview
• Security policies
• Audit checklist

---

❌ What's NOT in This Repository

For security and intellectual property reasons, the following are NOT included:

• ❌ AI engine implementation (trade secret)
• ❌ Backend API logic (proprietary)
• ❌ Database schema & queries (security)
• ❌ Image processing algorithms (IP)
• ❌ API keys & secrets (obvious)

---

🔒 Security Guarantees

We NEVER:

• ❌ Store your private keys
• ❌ Request your seed phrase
• ❌ Access your wallet without permission
• ❌ Execute transactions without your approval

We ONLY:

• ✅ Store your public wallet address (public information)
• ✅ Track usage count (for credit system)
• ✅ Process transactions YOU explicitly approve

Transparency:

• 💰 Treasury Wallet: Configured via NEXT_PUBLIC_RECEIVER_WALLET environment variable
• 🔗 All transactions are on-chain and publicly verifiable
• 📊 Credit system is tracked in our database (wallet address + count only)

---

📂 Repository Structure

santafi-verified/
├── README.md                    # You are here
├── SECURITY.md                  # Security policy & contact
├── LICENSE                      # MIT License
├── verified-code/
│   ├── wallet/                  # Wallet integration code
│   │   ├── WalletButton.tsx
│   │   ├── WalletContextProvider.tsx
│   │   └── README.md
│   ├── payment/                 # Payment handler code
│   │   ├── payment-handler.ts
│   │   └── README.md
│   └── types/                   # TypeScript definitions
│       └── index.ts
└── docs/
    ├── ARCHITECTURE.md          # High-level architecture
    ├── WALLET_FLOW.md           # Wallet connection flow
    ├── PAYMENT_FLOW.md          # Payment processing flow
    └── FAQ_SECURITY.md          # Security FAQ

---

🛡️ How to Verify

1. Review the Code

git clone https://github.com/SantaFiXYZ/santafi-verified.git
cd santafi-verified

2. Check Wallet Integration

• Read verified-code/wallet/WalletContextProvider.tsx
• Verify: No private key storage
• Verify: Standard Solana wallet adapter usage

3. Check Payment Handler

• Read verified-code/payment/payment-handler.ts
• Verify: Transparent SOL transfer
• Verify: User approval required

4. Read Security Docs

• SECURITY.md - Our security policy
• docs/ARCHITECTURE.md - System architecture
• docs/FAQ_SECURITY.md - Common security questions

---

🤝 Community Audit

We welcome security researchers and community members to audit this code.

Found a security issue?

• 📧 Email: security@santafi.xyz
• 🐦 DM: @SantaFiXYZ
• 🔒 Responsible disclosure appreciated

---

🏗️ Tech Stack

• Frontend: Next.js 15 (App Router)
• Wallet: Solana Wallet Adapter
• Blockchain: Solana Mainnet
• RPC: Helius (enterprise-grade)
• Language: TypeScript

---

📜 License

This verified code is released under the MIT License.

Note: This license applies ONLY to the code in this repository. The full SantaFi application (including backend, AI engine, and proprietary features) is NOT open source.

---

🎄 About SantaFi

SantaFi is an AI-powered Christmas PFP studio built on Solana. Transform your NFT or photo into a festive masterpiece in seconds.

• 🌐 Website: santafi.xyz
• 🐦 Twitter: @SantaFiXYZ
• 💬 Community: Join Discord (coming soon)

---

❓ FAQ

Why not open source everything?

SantaFi is a SaaS product, not a DeFi protocol. Our AI engine, backend logic, and image processing algorithms are proprietary intellectual property. However, we believe in transparency where it matters - your wallet security.

Can I use this code in my project?

The wallet integration code is MIT licensed and can be used as reference. However, please note:

• This is sanitized/simplified code
• Production implementation may differ
• No warranty or support provided

Is this the actual production code?

This is sanitized and simplified version of our production code. Core security logic is identical, but:

• API endpoints are placeholders
• Environment variables are examples
• Some error handling is simplified
• Business logic is removed

How often is this updated?

We update this repository when there are security-relevant changes to our wallet or payment integration. Feature updates are NOT reflected here.

---

Built with ❤️ by the SantaFi team

Website • Twitter • Security