The key stays in the chip
The private key is held in the card's secure chip and cannot be exported. The phone sends data to sign and gets back a signature.
Chimp is an iOS wallet for Stellar where the card is the wallet. The app shows balances and prepares operations. Only the card can sign them.
01 · What it is
Chimp is a non-custodial Stellar wallet. Its private key lives inside the card's chip and never leaves it. The phone never holds the key, and neither does ChimpDAO.
The iOS app reads balances and prepares each operation. To move anything, you hold the card to the phone, and enter its PIN on cards that have one.

02 · How it works
Hold the card to the phone. The app reads the chip's public key, your Main account is created, and the card signs to link itself to it.
Send testnet XLM or USDC to the card's C… address from a Stellar wallet that supports contract addresses.
Fund your card →Every movement of funds asks for a tap of the card, and its PIN if it has one.
Chimpy
Looking is free. Moving money takes a tap.

03 · Security model
The private key is held in the card's secure chip and cannot be exported. The phone sends data to sign and gets back a signature.
On cards with a PIN, the card verifies its own PIN: without the right PIN the chip refuses to sign, whatever phone it is held against. Some cards have no PIN.
The card signs an intent bound to the amount, the recipient and the contract. Change any of them and the signature no longer matches.
04 · Integrations
Integrations will plug into card authorization through a common adapter interface, which is planned. Statuses are updated as adapters ship.
Swap
Token swaps from the Main account, routed through Soroswap.
Save
Deposits into and withdrawals from DeFindex vaults.
Ramps
Moving between local currency and Stellar assets.
Cross-chain
Receiving assets from other chains into the card wallet.
Funding
Connects an external Stellar wallet on the Fund page to top up a card.
05 · For partners
A Stellar project can issue Chimp cards with its own artwork. The contracts and the security model stay the same; only the card face changes.
Planned