Trust & security
Trust & Security Center
Kura is a non-custodial, open-source wallet built around Zero-Access privacy, so sensitive user data remains unreadable to operators by default. Last updated: October 2026
Operator & Ownership
Operator: Rick Weng, an individual
Source code & copyright: Prism Capital LLC, published on GitHub
Former operator: Kura Finance LLC, a Wyoming limited liability company (dissolved)
Contact:[email protected]
Service Status
Kura Finance LLC has shut down. Kura is now an open-source project with only basic wallet features maintained, on a best-effort basis and without a support team. Bank transfers and fiat ramps, US stocks, cards, KYC, TrackFi, subscriptions, and referrals are permanently discontinued, and we no longer accept sign-ups or deposits. The Service is provided “as is” and used at your own risk; see the Terms of Service and Risk Disclosure.
Cryptographic Privacy & Infrastructure
Non-Custodial by Design:
We are a software provider, not a custodian. Kura is secured by Multi-Party Computation through our authentication partner, so no single party holds your full key. Our systems cannot move your funds, and only you can authorize transactions.
Zero-Access Architecture:
Financial data you connect in TrackFi uses zero access encryption with a key unlocked by your device passkey. Our servers store only ciphertext, so we intentionally limit operator visibility into sensitive financial content. Biometric unlock data remains on your device.
Data Computation Posture:
Data in transit is encrypted via TLS 1.2/1.3, and sensitive data handling follows strict access minimization with strong computation boundaries. We do not operate broad plaintext access pipelines for user financial records.
Disclosure Boundary by Design:
Because we do not hold universal plaintext capability for sensitive user data, we may be technically unable to provide readable data beyond what our architecture actually stores in accessible form, including if systems are breached or under lawful government request processes. We do not sell user data.
Third-Party Providers
Kura relies on independent third-party providers, each operating under its own licenses, compliance programs, and terms. Providers marked “discontinued” are no longer integrated with Kura:
- Privy — wallet authentication, OAuth sign-in, MPC key management, and private-key export.
- Bridge — fiat on/off ramp and virtual accounts (discontinued).
- MoonPay — card-based crypto purchases (discontinued).
- Li.Fi — crypto swaps and cross-chain bridges.
- Morpho — DeFi yield vaults and lending/borrow markets on Base.
- Dinari — tokenized real-world assets and US equities (discontinued).
- Sumsub — identity verification for card partner onboarding (discontinued).
- Card partners — non-custodial debit card issuance and processing (discontinued).
- Stripe — subscription billing (discontinued).
- Plaid — read-only bank and investment account connectivity (discontinued).
- CEX partners — read-only exchange API connections for TrackFi balance tracking (discontinued).
- DeBank — on-chain token and DeFi position data.
- CoinGecko — cryptocurrency market data.
- Pimlico — smart-account transaction infrastructure on Base.
- WalletConnect (Reown) — secure wallet-to-dApp sessions.
Regulatory Framework & Compliance Stance
Identity Verification (KYC/AML):
Kura no longer offers any feature that requires identity verification. While those features were available, identity verification was performed by regulated partners — not Kura: Bridge for fiat ramps (including business KYB where supported), Sumsub for card partner onboarding, and Dinari for US securities access. KYC data was processed by those partners to meet their anti-money-laundering obligations, is not held by Kura in readable form, and may be retained by those partners under their own obligations.
Subscriptions & Referrals:
Paid tiers (Basic, Pro, Ultimate) and the referral program have been permanently discontinued. Past participation remains subject to the Referral Program Terms.
Global Sanctions (OFAC) Compliance:
We are committed to operating within the legal frameworks of the United States. We and our partners adhere to international sanctions and use screening to block addresses or users associated with illicit activities or comprehensively sanctioned jurisdictions (OFAC) from accessing relevant services.
Regional Availability:
The Kura Card, fiat ramps, and Dinari securities are discontinued. Remaining features, including Morpho Earn and Morpho Borrow, may be unavailable in some regions and depend on third-party protocols and providers.