Why is this safe?

Your bank data stays sealed.

A two-minute read. Every point links to the full details in the docs.

What we read

The scorer fetches your transactions from the bank, up to two years, and uses only the last 6 full months of your main account to work out your income and spending patterns: money in, money out, overdraft fees and your balance. On this demo, that is Plaid's test bank. The five rules

Where it's scored

On mainnet: inside a sealed enclave (OutLayer, Intel TDX). Not on our server and not by us; even the machine's operator can't read it. A real mainnet score: transaction.

On this testnet demo, honestly: the same pinned scorer runs on our server, outside an enclave, so that server sees the test bank data while it scores. It keeps only the public result. Testnet vs mainnet

What leaves

Only a band, a score, an income cap (the most your limit can be), a fingerprint and your name sealed so nobody can read it. A real receipt from this demo:

Plaid sent 386 transactions from 14 accounts; the scorer read the last 6 months (36 transactions from your main account), and none of it left.

And everything that went on-chain for that score:

{
  "band": "B",
  "score": 720,
  "income_cap": 250000000,        // $250, the most your limit can be
  "fingerprint": "7be4d3a3…2cd5", // one bank identity, one borrower
  "sealed_identity": "KbZjE5/i…", // your name, encrypted
  "v": 1
}

No transactions, balances, account numbers or names. The bank connection is removed after one fetch. Privacy & the enclave

Why you don't have to trust us

The scorer is a pinned public WASM: its SHA-256 is fixed in the contract, and anyone can download the file and check the hash.
The contract accepts a score only from that exact scorer, through its own request.
Only you can ask for your score: each request is signed with your account's own key.
Every score, loan, repayment and default is a public transaction on the ledger.

Verify it yourself, step by step

Who holds the money

The smart contract, not KredoFi. No owner action can move the pool's cash, outstanding loans or the reserve; the owner can only take the treasury's share of interest. One honest caveat: the contract's keys can still deploy new code, which is why locking them is first on the roadmap. Fees & treasury

What if you don't repay

After the due date and a grace period, anyone can mark the loan as defaulted. The reserve pays lenders back first, the borrower can never borrow again, and their sealed name is released only to the recovery partner. For borrowers

Testnet vs mainnet, honestly

This demo is testnet: test bank, test USDC, no real money, and the scorer runs on our server.
Mainnet (kredofi.near) scores inside the enclave and has produced a real score, but has made no loans yet.
Bank data is Plaid's sandbox only; real banks need production access and a licensed lending partner.

Who built it

Kenil Vekariya (Kency), Surat, India. X: @vekariya_kenil. Built for the NEAR Hackathon, November 2026.

FAQ

Can KredoFi see my bank password?

No. You log in inside Plaid's window; we only get a one-time token.

Is my bank data stored?

No. The scorer reads it, keeps only the result, and removes the bank connection after scoring.

Is this real money?

Not on this testnet demo: test USDC and a test bank.