One signing key, days of settlement volume behind it. That's the risk
@xochi_fi's PXE Bridge is built around: it gives EVM solvers a familiar JSON-RPC path to shielded settlement on Aztec, backed by a pre-funded account.
SpendingLimitAccount puts the spending rules in the account: per-tx and daily caps, a fail-closed allowlist, and a proof that what gets checked is what actually moves.
We reviewed it assuming the signing key was already stolen. Even then, the contract must prevent a compromised signer from bypassing the spending controls. The team addressed all findings before the final report.