ZuriFi engineering
Blog
Notes on how we design and build financial infrastructure — the decisions, the trade-offs, and the lessons we paid for.
No passwords, nothing to phish: passkeys and Turnkey at the custody boundary
There is no password column in our database and no login secret a phishing page can capture. How WebAuthn passkeys, Turnkey sub-organizations, and operation-bound approval tokens turned authentication into cryptography — and why the servers that verify a login couldn't forge one if they tried.
Read postGasless transactions: account abstraction on EVM, an energy market on TRON
Our users hold stablecoins, not gas tokens. How a transaction leaves a wallet that has never held a wei of ETH or a fraction of a TRX — sponsored user operations on EVM chains, and rented energy on TRON at a fraction of the burn price.
Read postHow we designed a cross-chain deposit indexer that refuses to lose money
Ethereum, Bitcoin, TRON, and Solana are four different planets. Here's the design that watches all of them with one loop, one money path, and one uncomfortable decision that everything else follows from.
Read post