Send the Wallet, Not just the Coins like an envelope

Background

Think about how easy it is to put $10 in an envelope and give it to a friend. Why is doing the same with crypto so hard? Why do we have to ask for complex wallet addresses or force friends to set up seed phrases just to receive a gift?

I built MyBucks.online to make crypto as easy as a physical gift card.

The Magic: Send the Wallet, Not Just the Coins

Imagine creating a one-time wallet in seconds, loading it with USDT, and sending the entire wallet via a simple link on Telegram or WhatsApp. The recipient clicks the link and instantly takes full ownership.

No registration. No app installs. No seed phrase headaches.

Design Philosophy

mybucks.online is a seedless, disposable crypto wallet designed for speed, convenience, and decentralization. It does not require app installs, browser extensions, or seed phrases. It converts human-readable, traditional credentials into a wallet private key instantly using a one-way hash function in the browser.

mybucks.online is not intended to replace full-featured wallets such as MetaMask or Trust Wallet. It targets micro-transactions and URL-based gifting, and aims to foster a lightweight, accessible gifting culture in Web3.

Security Architecture

In mybucks.online, the passphrase and PIN are the primary credentials. It derives a private key from your passphrase and PIN using Scrypt and Keccak256. The Scrypt KDF was intentionally chosen to increase computational cost of key derivation and strengthen resistance to brute-force attacks.

Key derivation runs entirely in the browser — no storage, no third-party key-management APIs. There is no server, no storage, and no database. The wallet is generated and erased instantly.

1-Click Gifting: Wallet via URL

The passphrase, PIN, and active network ID are encoded into a URL hash fragment and shared. On the recipient side, the payload is parsed, key derivation runs automatically, and the wallet opens immediately.

There is no server-side link expiration — the derived on-chain address is fixed. For as long as funds remain at that address, they are accessible to anyone who holds the link.

This enables:

• One-time starter wallets for gifting without requesting wallet addresses
• Bulk distribution and massive airdrops through shareable links

Core Package Integration

Core functions are published as an independent package: @mybucks.online/core

https://www.npmjs.com/package/@mybucks.online/core

Browser-Level Hardening

mybucks.online uses strict Content Security Policy (CSP) to reduce risks from XSS and unauthorized script injection.

Credential data is encoded in a URL hash fragment (#wallet=...) so it stays browser-side and reduces exposure in server-side logs. The wallet parameter is removed immediately after parsing.

Vulnerabilities and Mitigation Strategy

Major Vulnerabilities

• Salt in key derivation is deterministically derived from passphrase/PIN, not a globally unique random salt
• Users can choose weak, compromised, or common passphrase/PIN combinations
• Anyone with a transfer link can extract passphrase/PIN (Base64-encoded for URL transport)

Our Response

• Added zxcvbn validation to block common, compromised, and dictionary-based patterns
• Password-chunking approach: both Passphrase and PIN required (not a single long password)
• Auto-fill feature generates ~130-bit entropy credentials
• Explicitly positioned for micro-gifting, not long-term storage of high-value assets

Networks & Token Display

Supported networks:

• EVM chains: Ethereum, BNB Chain, Polygon, Arbitrum, Avalanche C-Chain, Optimism, Base
• TRON

Token display is filtered against @uniswap/default-token-list to reduce scam/fake token visibility.

Trust & Verification

• Secure3 security audit — published findings
• HackenProof wallet cracking challenge — community stress-testing and follow-up improvements

Disclaimers & User Responsibility

mybucks.online is intended for micro-transactions and gifting, not long-term storage of high-value assets.

• No reset/recovery for the passphrase + PIN. If lost, funds are permanently inaccessible.
• Recipients need a small amount of native token to pay gas. Gift givers are encouraged to include this with the gift.

References

• mybucks.online
• whitepaper
• app.mybucks.online
• docs.mybucks.online
• GitHub
• npm package

Conclusion

MyBucks.online provides an innovative and convenient bridge for both Web2 and Web3 users. By replacing unfamiliar seed phrases with a classic password-based format, users can create a crypto wallet in seconds — the perfect starting point for any Web3 journey.

Imagine preparing thousands of digital envelopes, each containing a $5 gift, distributing them to campaign visitors at a public event. That’s the power of 1-Click Gifting.

We are open to collaborations on massive token distribution, 1-click gifting integrations, and sponsorship opportunities